?SETCONFIG@@YAXXZ
Static task
static1
Behavioral task
behavioral1
Sample
7e15c84da2f3b55adef3334c5a43f86beb526b0f1a903ca817550725637b30f8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7e15c84da2f3b55adef3334c5a43f86beb526b0f1a903ca817550725637b30f8.exe
Resource
win10v2004-20220812-en
General
-
Target
7e15c84da2f3b55adef3334c5a43f86beb526b0f1a903ca817550725637b30f8
-
Size
132KB
-
MD5
719f1f7f8c3548011a4c2ec25260f0f5
-
SHA1
85713c051c00ff953b775e64301980e3709b8083
-
SHA256
7e15c84da2f3b55adef3334c5a43f86beb526b0f1a903ca817550725637b30f8
-
SHA512
cbdc283efe5c7b1549c97bf8d9b4d7f59a719110ef655e59ce4e0dba96c35cbfed844a2f7939ade70f7b24f3bc2caa479810b26fe0302a920ec0a742f88ebf8b
-
SSDEEP
1536:L/3AzEEdMz2Ro8r4xeWLiiHaU6giVAO3i6uOb7SLERGT/8bL2e0Wca64:b34Ej6oC4tBA9y63HSDbrMca64
Malware Config
Signatures
Files
-
7e15c84da2f3b55adef3334c5a43f86beb526b0f1a903ca817550725637b30f8.exe windows x86
893497ece073787af5ed7206a866d8a1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
kernel32
SetThreadPriority
CloseHandle
SetEvent
CreateSemaphoreA
DeleteFileW
GetTickCount
PulseEvent
WriteFile
GetLastError
TerminateThread
Sleep
VirtualAlloc
GetProcAddress
GetModuleHandleA
SuspendThread
HeapSize
SetStdHandle
RtlUnwind
LCMapStringW
LCMapStringA
WaitForSingleObject
DeleteFileA
RaiseException
FlushFileBuffers
ReadFile
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
MultiByteToWideChar
VirtualProtect
GetSystemInfo
VirtualQuery
HeapReAlloc
LoadLibraryA
SetFilePointer
GetACP
GetLocaleInfoA
user32
LoadImageA
LoadIconW
LoadCursorW
LoadBitmapW
gdi32
CreateCompatibleBitmap
ole32
CoCreateInstance
oleaut32
VariantInit
winmm
joyGetThreshold
mciSendCommandA
Exports
Exports
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ