Static task
static1
Behavioral task
behavioral1
Sample
7c56c605b8fe9d6831d4d219a61f23778e18490620235863e014f19a3dc90bb2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7c56c605b8fe9d6831d4d219a61f23778e18490620235863e014f19a3dc90bb2.exe
Resource
win10v2004-20220901-en
General
-
Target
7c56c605b8fe9d6831d4d219a61f23778e18490620235863e014f19a3dc90bb2
-
Size
120KB
-
MD5
6af8e5891dd8a9b40ec939324cdb8bf9
-
SHA1
56e469256c39f91a1ac5ba093329d949a4e706da
-
SHA256
7c56c605b8fe9d6831d4d219a61f23778e18490620235863e014f19a3dc90bb2
-
SHA512
22f36042173ec1e1cfaf70f0e010de6a8d88c9e575d7939af69ffd183041c2ea9b5b7810dbbceced0f8710c555f8917bdc8efb1d62c84f65513b6c949a99cfa4
-
SSDEEP
1536:z4GX3PiPLtnqmu6ycsuGj2BqRKVR3l/2NGck5NbjwdM5euiv5pzdFczKcI:zfX3PiPxqmOcsuGjZRk4/kTbUQFiI+h
Malware Config
Signatures
Files
-
7c56c605b8fe9d6831d4d219a61f23778e18490620235863e014f19a3dc90bb2.exe windows x86
680cdf4dc24a8390e3e856c4ad249af9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
CloseHandle
GetModuleHandleW
WaitForMultipleObjects
GetCurrentDirectoryA
GetConsoleMode
FindNextVolumeA
CloseHandle
GetStringTypeA
FindFirstVolumeA
HeapCreate
Sleep
CreateSemaphoreA
CloseHandle
OpenMutexW
GetEnvironmentVariableW
GetModuleHandleA
GetDiskFreeSpaceW
GetFullPathNameW
GetFullPathNameW
ReadConsoleA
ReleaseSemaphore
GetVolumePathNameW
dbghelp
ImageRvaToVa
FindFileInPath
ImageRvaToSection
ImageNtHeader
Sections
.text Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.res Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE