Static task
static1
Behavioral task
behavioral1
Sample
7a854c7f5a9fd9568c8ad4841104647d8ce028cd6b6a710e1f1f4adb3f77bcd5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7a854c7f5a9fd9568c8ad4841104647d8ce028cd6b6a710e1f1f4adb3f77bcd5.exe
Resource
win10v2004-20220812-en
General
-
Target
7a854c7f5a9fd9568c8ad4841104647d8ce028cd6b6a710e1f1f4adb3f77bcd5
-
Size
76KB
-
MD5
00fd9f11890cfb2cd8980654dfe24426
-
SHA1
7a86272dbfaca39fe52bfe0357f13d3e1c0efb73
-
SHA256
7a854c7f5a9fd9568c8ad4841104647d8ce028cd6b6a710e1f1f4adb3f77bcd5
-
SHA512
6fc643aa1152305d95a660cc1295e087fdc4053cdbd7cebf397924e0f8b717d43c305f7e40608edaf391ad3e68d41c09022202d9907ca8fa7c8764e248baa93c
-
SSDEEP
1536:nTGJDVB7e9fzKBNJIDfk+7s4do1u2wwIEjEErxTWDTMqhGKYIZTET8x:I4GBMDfk+7syt2wwIEjBkMqhGKZTbx
Malware Config
Signatures
Files
-
7a854c7f5a9fd9568c8ad4841104647d8ce028cd6b6a710e1f1f4adb3f77bcd5.exe windows x86
d34d6190463bf56053c8395a577589d8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetNumberFormatW
AllocateUserPhysicalPages
CreateMailslotA
RegisterWowExec
CheckRemoteDebuggerPresent
ExitProcess
SetThreadIdealProcessor
SearchPathA
GetVersion
DecodeSystemPointer
GetPrivateProfileSectionW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE