Static task
static1
Behavioral task
behavioral1
Sample
d7ebc53248fe31f7b1f057bf933f61ab933e3132fb83316511ed82ead4349b5a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d7ebc53248fe31f7b1f057bf933f61ab933e3132fb83316511ed82ead4349b5a.exe
Resource
win10v2004-20220812-en
General
-
Target
d7ebc53248fe31f7b1f057bf933f61ab933e3132fb83316511ed82ead4349b5a
-
Size
108KB
-
MD5
7378fc474d381277204c51550f7388f4
-
SHA1
f761ba617ea00b4f363ecd83284d76cd48c6004d
-
SHA256
d7ebc53248fe31f7b1f057bf933f61ab933e3132fb83316511ed82ead4349b5a
-
SHA512
1e50054065817dbc3c0fada6c7feb60427b804b399ad0941c511e0f5157b3b9fbce8ea59483cf5a7137bd27590addb12cab6cc17ad0f0893f32ad736d56a4ec3
-
SSDEEP
3072:eXgUpacis5hadhJSo0u8XzoI7h+aS1Gn3:rUgsGvAuQzo0naG3
Malware Config
Signatures
Files
-
d7ebc53248fe31f7b1f057bf933f61ab933e3132fb83316511ed82ead4349b5a.exe windows x86
acabede61fe2e28b2a5f93496fd83508
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetVersion
ExitProcess
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapAlloc
TerminateProcess
GetCurrentProcess
InitializeCriticalSection
WideCharToMultiByte
GetTimeZoneInformation
InterlockedDecrement
InterlockedIncrement
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
SetFilePointer
VirtualAlloc
HeapReAlloc
FlushFileBuffers
LCMapStringA
LCMapStringW
ReadFile
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetProcAddress
LoadLibraryA
SetStdHandle
CloseHandle
ws2_32
inet_addr
gethostbyaddr
lsapiw32
ord85
ord79
ord111
ord76
ord127
ord122
ord105
ord23
ord110
ord56
ord9
ord67
ord57
ord103
ord62
ord48
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ