Static task
static1
Behavioral task
behavioral1
Sample
c915eb7adb8936eddcbc3374c2fc930f654975ced17d41d7cb4bc1171d50f6b7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c915eb7adb8936eddcbc3374c2fc930f654975ced17d41d7cb4bc1171d50f6b7.exe
Resource
win10v2004-20220812-en
General
-
Target
c915eb7adb8936eddcbc3374c2fc930f654975ced17d41d7cb4bc1171d50f6b7
-
Size
184KB
-
MD5
67ec074949ae0d1295a65e26d5c2703d
-
SHA1
9f300cbdb076d7e4fbae0de688b91181ee43f255
-
SHA256
c915eb7adb8936eddcbc3374c2fc930f654975ced17d41d7cb4bc1171d50f6b7
-
SHA512
ece32d9a86b7d819e486b755cd14f802406f561a3dfbd13b7463e97a7a57bc3415ae92d52caad9a5daeed74803722439b6f4eeb5d40015c399bc287e268eccfd
-
SSDEEP
3072:0XSVnqHD4pAC8AKS6SX+gkhEQdmCHFBG5HEn3IY9SpqCqGQ86oX3HKUg:0XsbYgkhEQzGV0CZQa
Malware Config
Signatures
Files
-
c915eb7adb8936eddcbc3374c2fc930f654975ced17d41d7cb4bc1171d50f6b7.exe windows x86
7610d36f19efd85826c58c05af9f6f0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetLastError
DeleteFileA
MoveFileA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
ExitProcess
HeapCreate
VirtualFree
RtlUnwind
WriteFile
CloseHandle
VirtualAlloc
GetFileAttributesA
CreateFileA
GetCurrentProcessId
LCMapStringA
LCMapStringW
FlushFileBuffers
SetFilePointer
GetProcAddress
LoadLibraryA
SetStdHandle
SetEndOfFile
ReadFile
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapReAlloc
GetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
Sections
.text Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE