Static task
static1
Behavioral task
behavioral1
Sample
7ed5b70c74e2ea8fe61a842c5a521c0400452b7b76747a4218355c1e6ce76bfc.exe
Resource
win7-20220812-en
General
-
Target
7ed5b70c74e2ea8fe61a842c5a521c0400452b7b76747a4218355c1e6ce76bfc
-
Size
448KB
-
MD5
0071805087cabbc7e0fca2ec2cc7e6f0
-
SHA1
f04ab9567825c6e8a196b0139d8939730d020f5b
-
SHA256
7ed5b70c74e2ea8fe61a842c5a521c0400452b7b76747a4218355c1e6ce76bfc
-
SHA512
da87f49a3c6fab47b6ad96418354f471798da1d755d47eff8d49f56b64c0e598d0b3fe2caa6e3a7d9c369273fd1f41e2440bc103694888907cca3dd82a607224
-
SSDEEP
12288:K9JZE3C64OWhrY+yaVDaQOIC4Fp7lLUVeiL9NjOaL:wt8WhrY3YDaQOIC4FBhUh9L
Malware Config
Signatures
Files
-
7ed5b70c74e2ea8fe61a842c5a521c0400452b7b76747a4218355c1e6ce76bfc.exe windows x86
71ae544a400a4059a55c934b1c416b82
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
InterlockedIncrement
RaiseException
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetLastError
HeapReAlloc
DeleteFileW
ReadFile
SetEndOfFile
GetSystemTimeAsFileTime
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
Sleep
GetProcAddress
GetModuleHandleA
ExitProcess
SetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
VirtualAlloc
CloseHandle
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
InitializeCriticalSection
LoadLibraryA
CreateFileW
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA
Sections
.text Size: 264KB - Virtual size: 263KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1012B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rmnet Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE