Static task
static1
Behavioral task
behavioral1
Sample
1e7fa6db8cf83b596671e677ab3677c15f291c6cf9231808f3002126205a20ad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1e7fa6db8cf83b596671e677ab3677c15f291c6cf9231808f3002126205a20ad.exe
Resource
win10v2004-20220812-en
General
-
Target
1e7fa6db8cf83b596671e677ab3677c15f291c6cf9231808f3002126205a20ad
-
Size
867KB
-
MD5
6fd2b24156ef0fa0a35056b3516d6fa8
-
SHA1
5aff21caa70444f68dbef0cf248fc84d23ec9ba7
-
SHA256
1e7fa6db8cf83b596671e677ab3677c15f291c6cf9231808f3002126205a20ad
-
SHA512
bb9e32d5eb65b81040774bf9bbc7ce441800605a15edefac0513ecfef6b0ea1d07f7685d9d119ecfc04581b5a20838cbefc9b4601a3f2295a7b230ebfbb8fdfe
-
SSDEEP
24576:OGEeYK1IM/m04wHskTQ3vk0L4UMGiiMJbsnFXxQE:Fhtm0tHsks37XMGhFXxX
Malware Config
Signatures
Files
-
1e7fa6db8cf83b596671e677ab3677c15f291c6cf9231808f3002126205a20ad.exe windows x86
cbe74761fa8a47afeba90978ded927de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetVersion
GetCurrentThread
GetCommandLineA
GetLastError
GetModuleHandleA
GetCurrentThreadId
GetCurrentProcessId
ExitProcess
VirtualAlloc
CreateProcessW
HeapCreate
GetModuleHandleW
GetACP
CloseHandle
ReadFile
SetFilePointer
RaiseException
GetCPInfo
GetCommandLineW
GetEnvironmentStrings
FileTimeToLocalFileTime
GetModuleFileNameA
GetEnvironmentStringsW
GetSystemInfo
LCMapStringW
InterlockedIncrement
FindNextFileA
FindFirstFileA
GetProcAddress
DeleteFileW
GetStartupInfoA
FlushFileBuffers
SetEvent
lstrcmpiA
SetHandleCount
EnterCriticalSection
HeapFree
SetCurrentDirectoryA
SetEndOfFile
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RemoveDirectoryA
GetVersionExA
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
LocalFree
GetStringTypeW
SetStdHandle
WriteFile
InterlockedExchange
GetSystemTimeAsFileTime
GetStringTypeA
LoadLibraryW
WideCharToMultiByte
FreeEnvironmentStringsW
CreateFileA
GetLocaleInfoA
GetCurrentProcess
WaitForSingleObject
GetFileAttributesA
GetStdHandle
user32
SetCursor
MessageBoxA
MoveWindow
SetForegroundWindow
GetDesktopWindow
SetWindowTextA
SetWindowLongA
PostMessageA
DefWindowProcA
KillTimer
LoadStringA
GetWindow
TranslateMessage
GetParent
ReleaseDC
GetCursorPos
GetDC
DispatchMessageA
IsWindow
PostQuitMessage
Sections
.text Size: 832KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ