Static task
static1
Behavioral task
behavioral1
Sample
7ee0c74b620abe13d5a0ec28581388b536817a0bec36a3df8a4e748986a16f3d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7ee0c74b620abe13d5a0ec28581388b536817a0bec36a3df8a4e748986a16f3d.exe
Resource
win10v2004-20220812-en
General
-
Target
7ee0c74b620abe13d5a0ec28581388b536817a0bec36a3df8a4e748986a16f3d
-
Size
278KB
-
MD5
6f0275d1ba8b348973eab730ab2e650d
-
SHA1
5ab2457cac95134443627460f3791170b0e43015
-
SHA256
7ee0c74b620abe13d5a0ec28581388b536817a0bec36a3df8a4e748986a16f3d
-
SHA512
e4cb1e3d98a5d416322956afab400571d39a49f800ec4c24ebf11265118bd870c638cfcd3a1f44ac191d65407ef722e558286aa9d93c01b6d1f482b4d908decb
-
SSDEEP
6144:DdOhvI8kBVHTo8da47p1m48big0U5nvMEwRI/Z1n:DkvIB2611Dg0cnUDI/Z1n
Malware Config
Signatures
Files
-
7ee0c74b620abe13d5a0ec28581388b536817a0bec36a3df8a4e748986a16f3d.exe windows x86
0773ed3d85c877b4701b2a371e0a2823
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
psapi
EmptyWorkingSet
EnumPageFilesW
EnumPageFilesA
EnumProcessModules
olecli32
LeObjectConvert
LeQueryBounds
LeGetUpdateOptions
LeSetBounds
LeQueryOpen
LeQueryOutOfDate
LeSaveToStream
LeObjectLong
LeQueryType
LeSetData
LeReconnect
LeQueryProtocol
LeRelease
printui
vQueueCreate
ConstructPrinterFriendlyName
vDocumentDefaults
vServerPropPages
vPrinterPropPages
kernel32
lstrcmpA
OutputDebugStringA
CloseHandle
GetLocalTime
lstrcpyW
CreateFileA
HeapAlloc
MultiByteToWideChar
FindResourceW
GetSystemTimeAsFileTime
LoadLibraryW
GetCurrentProcess
QueryPerformanceCounter
GetCurrentProcessId
GetACP
SetLastError
GetProcessHeap
GetSystemInfo
GetTickCount
GetCPInfo
HeapFree
SystemTimeToFileTime
SetUnhandledExceptionFilter
lstrlenW
WideCharToMultiByte
Sections
.text Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ