Static task
static1
Behavioral task
behavioral1
Sample
7949b1b7c5ea55373f4fd6274e1bbb8c8900d6451a9bb74e27d76900f3b02f0a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7949b1b7c5ea55373f4fd6274e1bbb8c8900d6451a9bb74e27d76900f3b02f0a.exe
Resource
win10v2004-20220812-en
General
-
Target
7949b1b7c5ea55373f4fd6274e1bbb8c8900d6451a9bb74e27d76900f3b02f0a
-
Size
156KB
-
MD5
55dcc7f234a420ed9752340e84e77e21
-
SHA1
a3fa592a5268d53eb9af64a573ffd32424eafc48
-
SHA256
7949b1b7c5ea55373f4fd6274e1bbb8c8900d6451a9bb74e27d76900f3b02f0a
-
SHA512
14e403be75550dbae213d49f7d5f2ce215b3acdaa848bb523cd17229c9aa15cc350ec663eb302b17c242e049c74501a950536a3b56f0edd32c5bd4c13ccdffcf
-
SSDEEP
1536:O3wRCMup+bsLppD5GU0+ZMFWvyBPkWHX8gSCbo:ewIMDbkpD5nkbo
Malware Config
Signatures
Files
-
7949b1b7c5ea55373f4fd6274e1bbb8c8900d6451a9bb74e27d76900f3b02f0a.exe windows x86
60147b0071620e7b71931ab6f64925c4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
FreeEnvironmentStringsW
WideCharToMultiByte
FlushFileBuffers
SetStdHandle
CloseHandle
GetStringTypeW
GetStringTypeA
SetFilePointer
LCMapStringA
MultiByteToWideChar
LCMapStringW
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
WinExec
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
HeapAlloc
HeapReAlloc
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
GetLastError
SetConsoleCtrlHandler
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCPInfo
GetACP
GetOEMCP
user32
GetMessageA
DispatchMessageA
TranslateMessage
RegisterClassA
ShowWindow
CreateWindowExA
DestroyWindow
PostQuitMessage
LoadCursorA
DefWindowProcA
LoadIconA
gdi32
GetStockObject
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
Sections
.text Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ