Static task
static1
Behavioral task
behavioral1
Sample
a7ee89c1df5f47193639850c953c1cab1a7f52c2fabe25b62316577903f0883e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a7ee89c1df5f47193639850c953c1cab1a7f52c2fabe25b62316577903f0883e.exe
Resource
win10v2004-20220812-en
General
-
Target
a7ee89c1df5f47193639850c953c1cab1a7f52c2fabe25b62316577903f0883e
-
Size
10KB
-
MD5
bc80cca79b2db7f09964e798f0f2b0d3
-
SHA1
6bf094404f59b0373fca9f974e0ef8d6c158ae78
-
SHA256
a7ee89c1df5f47193639850c953c1cab1a7f52c2fabe25b62316577903f0883e
-
SHA512
dc4b8266fa54d46360b86378b06e6ed07d2cb3b02764ad82e8bcf249de0f4afe396094f6c903792a3104204b7208227ac49bd4b861ea1ffc759e39cba1e448cd
-
SSDEEP
192:aldBEMN5NeMXQPQ4G3/wWAf2xJl1IuPsXafeOxNJ1R6l:a1tHonPQD/qeTlnNDR6
Malware Config
Signatures
Files
-
a7ee89c1df5f47193639850c953c1cab1a7f52c2fabe25b62316577903f0883e.exe windows x86
a4705eba0f7fce6b0f0e94d0da808d4d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextMetricsA
ExtTextOutW
user32
SetWindowPlacement
MessageBeep
InvalidateRect
CharUpperA
ScreenToClient
DrawTextW
SendMessageW
PostQuitMessage
kernel32
LocalAlloc
GetProcAddress
HeapAlloc
GetModuleHandleA
MulDiv
HeapCreate
GetVersionExA
VirtualProtect
WriteFile
GetCommandLineW
LoadLibraryA
GetVersion
FindClose
SetConsoleCP
GetStartupInfoA
GetACP
GetLastError
GetStringTypeA
GetEnvironmentStringsW
GetOEMCP
SetStdHandle
GetTickCount
GetEnvironmentStrings
CompareStringA
ExitProcess
GetCurrentProcess
RaiseException
FileTimeToSystemTime
GetCurrentProcessId
InterlockedCompareExchange
LoadLibraryExW
LoadLibraryW
GetLocaleInfoA
InterlockedExchange
VirtualAlloc
GetCommandLineA
lstrcmpiA
lstrcmpiW
GetCurrentThreadId
RtlUnwind
InterlockedIncrement
CreateFileA
advapi32
RegOpenKeyExW
RegEnumValueW
GetTokenInformation
CloseServiceHandle
msvcrt
_XcptFilter
_amsg_exit
memset
?terminate@@YAXXZ
ole32
CoTestCancel
StringFromCLSID
lz32
LZClose
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE