Static task
static1
Behavioral task
behavioral1
Sample
7d5ccedbd252d7db0b62316f23c6b8f8e0ad95fd5c5ba88f03dae0d81d583d6e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7d5ccedbd252d7db0b62316f23c6b8f8e0ad95fd5c5ba88f03dae0d81d583d6e.exe
Resource
win10v2004-20220901-en
General
-
Target
7d5ccedbd252d7db0b62316f23c6b8f8e0ad95fd5c5ba88f03dae0d81d583d6e
-
Size
208KB
-
MD5
42ad81b86ac5e8d99224ebc4a79a4102
-
SHA1
f4b5753fb04379916f5a9348105b4038da3799d7
-
SHA256
7d5ccedbd252d7db0b62316f23c6b8f8e0ad95fd5c5ba88f03dae0d81d583d6e
-
SHA512
5a1daa58cd188f5d8c257ae919612b35d5dda7f6b058d61a87325c30c555a878836162634c5c5413de83b6c55d5918a5fdedfd6f94ed30876950675e18443153
-
SSDEEP
3072:GS9YnDmBRjIZ6G5nq53g0neZ5qjpjmFB4P+wPHH0dU+KrVvwpQIWk3QdB:GSCmP9sqg0eWjpjmFB2nPhrVSQZIQdB
Malware Config
Signatures
Files
-
7d5ccedbd252d7db0b62316f23c6b8f8e0ad95fd5c5ba88f03dae0d81d583d6e.exe windows x86
8cf3d4afdb6bdc00ce2721b8aa498510
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLCID
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetProcessHeap
lstrcmpA
SystemTimeToFileTime
GetLocaleInfoW
GetSystemDefaultLCID
CreateFileA
SetLastError
GetEnvironmentStringsW
WideCharToMultiByte
QueryPerformanceCounter
lstrcpyA
CloseHandle
LoadResource
GetLocalTime
GetVolumeInformationA
GetTickCount
GetCurrentProcess
MultiByteToWideChar
FreeResource
GetOEMCP
LockResource
GetCurrentProcessId
QueryDosDeviceA
GetProcessId
lstrlenA
HeapAlloc
DeviceIoControl
HeapFree
LoadLibraryW
FindResourceA
advapi32
RegOpenKeyW
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegQueryValueExW
quartz
AMGetErrorTextA
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DBToAmpFactor
AMGetErrorTextW
DllUnregisterServer
AmpFactorToDB
user32
wsprintfA
CharNextA
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ