Static task
static1
Behavioral task
behavioral1
Sample
7ac433ea4f48d8e7dca62a40196037dcf1d9fd64d5a003728075efce109a200b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7ac433ea4f48d8e7dca62a40196037dcf1d9fd64d5a003728075efce109a200b.exe
Resource
win10v2004-20220901-en
General
-
Target
7ac433ea4f48d8e7dca62a40196037dcf1d9fd64d5a003728075efce109a200b
-
Size
232KB
-
MD5
5ccfa6708a1af00fbeeda0679652aae0
-
SHA1
9083ebe8187443cb2e0aa6461ae67bfc6d6261f8
-
SHA256
7ac433ea4f48d8e7dca62a40196037dcf1d9fd64d5a003728075efce109a200b
-
SHA512
7848a39119007c71b3e6f45a7203ba7fe3b84d296a3a54871f301b6b1f52d2380fa968e02a23fabecb3a097d5e3921e793c4550e428c8c4b8935f50a93abbc62
-
SSDEEP
6144:0T7oV1TDbwl28yL0SdSKsQvlpgqr5wc9:EOtSryL3SMvlr6
Malware Config
Signatures
Files
-
7ac433ea4f48d8e7dca62a40196037dcf1d9fd64d5a003728075efce109a200b.exe windows x86
04846244bbbbc6a572938503db7fcc9a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetComputerNameA
GetThreadContext
CreateThread
CreateProcessA
ExitProcess
VirtualAlloc
VirtualFree
GetCurrentProcess
GetSystemTimeAdjustment
GetTempPathA
GetTickCount
DosDateTimeToFileTime
CloseHandle
LockFile
FileTimeToLocalFileTime
WaitForSingleObject
SetEvent
ExpandEnvironmentStringsA
FindFirstFileA
UnlockFileEx
OutputDebugStringA
LockFileEx
GetProcAddress
LoadLibraryA
LoadLibraryExA
GetModuleFileNameA
UnmapViewOfFile
GlobalFree
InitializeCriticalSection
GetSystemTime
FreeLibrary
GetWindowsDirectoryA
HeapReAlloc
CreateFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 213KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ