NRWI4hvr5vHI
Static task
static1
Behavioral task
behavioral1
Sample
7d822ada1e1eba384bd246d67089fea7067ffc9c2891be4af6ecdcddf1e4c7f3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7d822ada1e1eba384bd246d67089fea7067ffc9c2891be4af6ecdcddf1e4c7f3.exe
Resource
win10v2004-20220812-en
General
-
Target
7d822ada1e1eba384bd246d67089fea7067ffc9c2891be4af6ecdcddf1e4c7f3
-
Size
135KB
-
MD5
77d939f0131fd1b78a7a0bde5cb88df1
-
SHA1
d7ab19ecede2d108028195fd66cbef20e0a0911f
-
SHA256
7d822ada1e1eba384bd246d67089fea7067ffc9c2891be4af6ecdcddf1e4c7f3
-
SHA512
14ecac11925ef49d4da88990724d4943043e73e07492524129956030620afbef0a60bd48a80ee5fc0f4a54673b10c66267bf62e877f78c7d2ec57ca3830870d3
-
SSDEEP
1536:gVG7xHHwuF8tF4+H/3zUDBY7TaJKSL8A9CxXsjV263536fynyx4UkYJwEifmab/T:Vha/bU+/u8WjV2635rnyVynpbqK8VS
Malware Config
Signatures
Files
-
7d822ada1e1eba384bd246d67089fea7067ffc9c2891be4af6ecdcddf1e4c7f3.exe windows x86
1b5139ca991af7f8235657dac5792c52
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UnregisterClassA
MapWindowPoints
GetMenuItemInfoA
SendMessageW
AdjustWindowRectEx
ActivateKeyboardLayout
FrameRect
CharUpperBuffA
ReleaseCapture
CreateIcon
ShowScrollBar
GetWindowTextA
GetMenu
DispatchMessageW
KillTimer
GetWindowRect
DestroyCursor
SetClassLongA
EnableWindow
RegisterClipboardFormatA
SetRect
SetWindowLongW
SetScrollPos
GetWindowDC
SetPropA
GetScrollRange
IsMenu
SetTimer
DestroyMenu
PtInRect
InflateRect
LoadBitmapA
GetWindowTextLengthA
GetMenuItemID
GetCapture
CreateMenu
OemToCharA
ChildWindowFromPoint
SendMessageA
EnumChildWindows
ShowWindow
IsZoomed
FindWindowA
GetDesktopWindow
GetParent
CharToOemA
CharNextW
DrawEdge
GetCursor
GetDC
IsWindowUnicode
DrawFrameControl
ShowOwnedPopups
PostQuitMessage
GetSystemMetrics
EnableMenuItem
LoadCursorA
GetIconInfo
CreateWindowExA
GetTopWindow
OpenIcon
oleaut32
VariantChangeType
SysFreeString
VariantCopyInd
GetErrorInfo
RegisterTypeLib
SysReAllocStringLen
kernel32
GetLocaleInfoA
GetCurrentProcessId
SetEvent
ReadFile
GetProcAddress
HeapFree
ExitProcess
ExitThread
EnterCriticalSection
LoadLibraryA
GetStdHandle
GetProcessHeap
SizeofResource
GetCPInfo
GetLocalTime
VirtualAllocEx
GetStringTypeA
GetSystemDefaultLangID
GetModuleHandleA
GetOEMCP
ResetEvent
GetTempPathA
WriteFile
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 106KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ