Static task
static1
Behavioral task
behavioral1
Sample
7112a63900deba925fca273de203be9555acbfe4074f8f618d9b2144db8d3170.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7112a63900deba925fca273de203be9555acbfe4074f8f618d9b2144db8d3170.exe
Resource
win10v2004-20220812-en
General
-
Target
7112a63900deba925fca273de203be9555acbfe4074f8f618d9b2144db8d3170
-
Size
60KB
-
MD5
52aa50b65dc1945810ad85fe5b6d9def
-
SHA1
4acfc60501c028149ca2ff07e9ace3c69c205b0a
-
SHA256
7112a63900deba925fca273de203be9555acbfe4074f8f618d9b2144db8d3170
-
SHA512
b02cb0b33747f893ce81f7d7b7d475759b182b2356feb1680b3ea9d8147c936eb2375034ae556d5da2220f8284b2ee632c865faf6ba249c11ac58a4c98ad6256
-
SSDEEP
1536:PQDzb+9Z4YrbuPfrqc80CXI5uQ5cd7+LX0+X+saESQk1H8D:YviL7X0Tqc8ZXI3uFWXpnalBH6
Malware Config
Signatures
Files
-
7112a63900deba925fca273de203be9555acbfe4074f8f618d9b2144db8d3170.exe windows x86
fce7809a30096dee5d325be7178490ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
ExitProcess
FindResourceA
GetModuleFileNameA
GetThreadContext
GetTickCount
LoadResource
LockResource
ReadProcessMemory
ResumeThread
SetThreadContext
SizeofResource
Sleep
VirtualAlloc
VirtualAllocEx
VirtualFree
WriteProcessMemory
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ