Static task
static1
Behavioral task
behavioral1
Sample
7c9bd797ae2b347bcbf9429b42f5909486dd18b007962e5c6920b18796fde642.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7c9bd797ae2b347bcbf9429b42f5909486dd18b007962e5c6920b18796fde642.exe
Resource
win10v2004-20220812-en
General
-
Target
7c9bd797ae2b347bcbf9429b42f5909486dd18b007962e5c6920b18796fde642
-
Size
798KB
-
MD5
365afded89de987d587cda6d58047be6
-
SHA1
44db3a57b046ec83d763b5f61faa0d4bd4ac83c7
-
SHA256
7c9bd797ae2b347bcbf9429b42f5909486dd18b007962e5c6920b18796fde642
-
SHA512
a38473a4630a0a61b6f048454e2b0ab440493e0cff786eff53040977f4161368bdc06b207b305d1a4a699676a2dcbd924fc30e5ed280ac07b0a67ca748e428df
-
SSDEEP
24576:U21s6iqmagu9Tzl1Cc3M5Fs8Y0pB98Rn88LRpM:NUaguJzl1V8sK8988L4
Malware Config
Signatures
Files
-
7c9bd797ae2b347bcbf9429b42f5909486dd18b007962e5c6920b18796fde642.exe windows x86
69aaf85e6642d732d3bac8d87a1ddb9a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetTickCount
InterlockedExchange
GetModuleFileNameA
CreateDirectoryA
LeaveCriticalSection
GetVersionExA
GetLocaleInfoA
VirtualProtect
GetModuleHandleA
CreateFileW
GetStdHandle
LocalFlags
CreateFileW
GetFileAttributesW
lstrlenA
GetCurrentThreadId
OpenEventW
AddAtomW
IsValidLocale
SetEvent
HeapDestroy
CreateMutexA
ResumeThread
SetFilePointer
SuspendThread
user32
MessageBoxA
PeekMessageA
SetRect
GetWindowLongA
DestroyIcon
IsMenu
LoadCursorA
GetWindowTextA
wsprintfA
GetWindowLongA
IsMenu
DestroyMenu
DispatchMessageA
dplayx
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer
DllRegisterServer
advapi32
IsValidAcl
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 756KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 793KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE