Static task
static1
Behavioral task
behavioral1
Sample
800617dcd72d0765dcc3c5d4d6c7490a1190e1e2e30c5f3a8d82cdbcba2cf930.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
800617dcd72d0765dcc3c5d4d6c7490a1190e1e2e30c5f3a8d82cdbcba2cf930.exe
Resource
win10v2004-20220812-en
General
-
Target
800617dcd72d0765dcc3c5d4d6c7490a1190e1e2e30c5f3a8d82cdbcba2cf930
-
Size
200KB
-
MD5
37a07519ec04715bbc49b221bc02c551
-
SHA1
ca479162b6b02420387909fa2b7457df6a0a023d
-
SHA256
800617dcd72d0765dcc3c5d4d6c7490a1190e1e2e30c5f3a8d82cdbcba2cf930
-
SHA512
d56aeb689c9a91370f11583f9b8200c061b57659cd78fcd44128adb9d8d52575e990e229b6d73c8c0f94f1817f3c21bb193d14947489c78021fe291f25e6820e
-
SSDEEP
3072:zC01+Kc0m8WSIUOqHmqqahYMfAEC2fVYH81rlXwX2J:DgKafUHjeMnVYH81xwG
Malware Config
Signatures
Files
-
800617dcd72d0765dcc3c5d4d6c7490a1190e1e2e30c5f3a8d82cdbcba2cf930.exe windows x86
865df307f560ffebd2e29acda46151be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetCurrentProcess
GetEnvironmentStringsW
GetLastError
GetModuleHandleA
GetProcAddress
GetStringTypeA
GetStringTypeW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
FreeLibrary
MultiByteToWideChar
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcpyA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LoadLibraryA
ExitProcess
gdi32
CombineTransform
Arc
RectVisible
Sections
.text Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ