Static task
static1
Behavioral task
behavioral1
Sample
7182663ccd62e6465a626a56e53298eb20ad24a511e34d4a50f93c630430c257.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7182663ccd62e6465a626a56e53298eb20ad24a511e34d4a50f93c630430c257.exe
Resource
win10v2004-20220812-en
General
-
Target
7182663ccd62e6465a626a56e53298eb20ad24a511e34d4a50f93c630430c257
-
Size
36KB
-
MD5
600abef3a90c9f63894f970e4b8fd2e0
-
SHA1
acd9e5d7a6611d0ce6275034712b28b9d60ab7f1
-
SHA256
7182663ccd62e6465a626a56e53298eb20ad24a511e34d4a50f93c630430c257
-
SHA512
6e1caeb749dc5e3824647204aa03dcb62cba21ad766380c94d6a0476ddea4699780b59ddc2e66df552172d01e5ce3a6508c435f350614544f91a4d9953ae897c
-
SSDEEP
768:G3fVHcf10bma38erbAl3n4XjnGg8XjcH:GPdW1gma3zr84TX8XIH
Malware Config
Signatures
Files
-
7182663ccd62e6465a626a56e53298eb20ad24a511e34d4a50f93c630430c257.exe windows x86
76d5815d14873d876e39846e038e22ec
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoAddRefServerProcess
HACCEL_UserMarshal
OleNoteObjectVisible
CoGetInterfaceAndReleaseStream
OleLoadFromStream
DllDebugObjectRPCHook
HENHMETAFILE_UserSize
CoRegisterMallocSpy
gdi32
GdiSetLastError
SetROP2
CreateEnhMetaFileA
GetTextColor
SetMetaRgn
DeviceCapabilitiesExA
ExtTextOutA
kernel32
GetCurrentProcess
CreatePipe
GetCommandLineA
_llseek
GetProcessHeap
VirtualAlloc
FindNextFileW
GlobalFree
GetModuleHandleA
HeapAlloc
VirtualFree
EnterCriticalSection
GetCurrentDirectoryW
ExitProcess
msvcrt
fflush
advapi32
RegSetKeySecurity
GetAccessPermissionsForObjectA
GetEffectiveRightsFromAclA
GetOverlappedAccessResults
EnumServicesStatusW
OpenBackupEventLogA
RegConnectRegistryA
GetSecurityDescriptorGroup
Sections
.text Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ