Static task
static1
Behavioral task
behavioral1
Sample
7def80039011ba48e10a2dbb0234a2fd.exe
Resource
win7-20220901-en
General
-
Target
7def80039011ba48e10a2dbb0234a2fd.exe
-
Size
5.9MB
-
MD5
7def80039011ba48e10a2dbb0234a2fd
-
SHA1
da0c7a37ba51f2dcf40925c16c2114a302d1fcd4
-
SHA256
25930781d193523b9ce112572ee0a5653c6e34b04e5f7d32c40cfc85d61c4756
-
SHA512
2043acbcacc2867b344af848518e378718929de0266fbaf4c70bc139e3b199f9975df21e579b4ac572f13ae5332ef3f82e6ae28c7cee1eb5833461510309c8f1
-
SSDEEP
98304:Nn3nvKnUMNNbyypcQjpyyTylKEzT+1KVY1CDl1ZlE2:Nn3nvKnUMvyy60pyy+lKEzT+10YIDl1T
Malware Config
Signatures
Files
-
7def80039011ba48e10a2dbb0234a2fd.exe.exe windows x86
aeca9047874bf1b93a590c0555845226
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
lstrcmpiA
GetConsoleWindow
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
GetModuleHandleA
QueryPerformanceCounter
Sleep
user32
ShowWindow
vcruntime140
__current_exception_context
_except_handler4_common
__current_exception
memset
__FrameUnwindFilter
api-ms-win-crt-runtime-l1-1-0
terminate
_controlfp_s
abort
_register_thread_local_exe_atexit_callback
_register_onexit_function
_cexit
__p___argv
__p___argc
_initialize_onexit_table
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_crt_atexit
_set_app_type
_seh_filter_exe
_c_exit
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
mscoree
_CorExeMain
Sections
.text Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 284KB - Virtual size: 285KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ