Static task
static1
Behavioral task
behavioral1
Sample
7d791175f5f2116cb3d02a8f78774ffea91d18f62104bca93152ac2c93fc61e7.exe
Resource
win7-20220901-en
General
-
Target
7d791175f5f2116cb3d02a8f78774ffea91d18f62104bca93152ac2c93fc61e7
-
Size
92KB
-
MD5
4bb5b4542ac3a6647355a29506da1f30
-
SHA1
7e0425582db7c237cfb50d5074b70c4a2218f635
-
SHA256
7d791175f5f2116cb3d02a8f78774ffea91d18f62104bca93152ac2c93fc61e7
-
SHA512
4eb32a7845985fd9b351e349a4ec661107c33607fb86a9051516cec4c1a15f554c89feadc645077cec55654b464bca199dc96f89a9dd3a46d9b61d9a30b56d62
-
SSDEEP
1536:iMJzlYyyRXHlK3uJTP9EKtJKORoW+aBBom6Gu:BtlYy4Hc3uVvPogOm/
Malware Config
Signatures
Files
-
7d791175f5f2116cb3d02a8f78774ffea91d18f62104bca93152ac2c93fc61e7.exe windows x86
53092881d74f01caeab5d4baea3cedd4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CertFreeCertificateContext
CertAddCertificateContextToStore
CertCreateCertificateContext
CertOpenStore
CertCloseStore
kernel32
GetLastError
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleHandleA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
HeapFree
VirtualFree
HeapCreate
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
GetStringTypeW
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rmnet Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE