Static task
static1
Behavioral task
behavioral1
Sample
7ddf1e8d232aa94fcd99034f171af87dee2be98ee6426682eac2c3c0c45b337c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7ddf1e8d232aa94fcd99034f171af87dee2be98ee6426682eac2c3c0c45b337c.exe
Resource
win10v2004-20220901-en
General
-
Target
7ddf1e8d232aa94fcd99034f171af87dee2be98ee6426682eac2c3c0c45b337c
-
Size
1.2MB
-
MD5
62f893c3488359564f6a26b404880ca0
-
SHA1
764b5d8d69f13c026f10c9c66e6c9fbeeb531742
-
SHA256
7ddf1e8d232aa94fcd99034f171af87dee2be98ee6426682eac2c3c0c45b337c
-
SHA512
5701adbdda0ce4eeb6c0c145ce49833682c43a5231150656fb27906c37bfb8c615a39240d8f8476a35a573b64dcc88050b1f33a09d21d059c69dbfcb2509ab21
-
SSDEEP
24576:KREPOrdCvR/npY6pv8lM1eNy2wyoqWFQ/20h:KRMOJcR/njvtO/hW
Malware Config
Signatures
Files
-
7ddf1e8d232aa94fcd99034f171af87dee2be98ee6426682eac2c3c0c45b337c.exe windows x86
bebaf28b465ca8e3b48bae1e71264544
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
VirtualFree
GetModuleHandleA
LoadLibraryA
GetCurrentProcessId
GetModuleFileNameW
GetCommandLineW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
ExitProcess
CreateThread
WaitForSingleObject
CloseHandle
DeleteCriticalSection
FreeLibrary
VirtualAlloc
CreateEventA
Sleep
SetEvent
GetProcAddress
GetLastError
HeapFree
GetCommandLineA
GetSystemTimeAsFileTime
HeapAlloc
IsProcessorFeaturePresent
GetProcessHeap
IsDebuggerPresent
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
RtlUnwind
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetLastError
InterlockedIncrement
InterlockedDecrement
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
GetStdHandle
GetFileType
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetFilePointerEx
SetStdHandle
WriteConsoleW
FlushFileBuffers
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
HeapReAlloc
CreateFileW
GetStringTypeW
HeapSize
LCMapStringW
SetEndOfFile
ReadFile
ReadConsoleW
Sections
.text Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 814KB - Virtual size: 823KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ