Static task
static1
Behavioral task
behavioral1
Sample
1e98508777187d182687e8abd1ecd7d30b9817bd8f84e4077104fdb5c9dd071b.exe
Resource
win7-20220812-en
General
-
Target
1e98508777187d182687e8abd1ecd7d30b9817bd8f84e4077104fdb5c9dd071b
-
Size
280KB
-
MD5
5f2bc1e612e672f67fef838572f08120
-
SHA1
36fdeb2783f5463150715633a984d8febf608cc4
-
SHA256
1e98508777187d182687e8abd1ecd7d30b9817bd8f84e4077104fdb5c9dd071b
-
SHA512
14d60838c7fcc56aa5525d8c8aed44df448f45a30d2123e6e9b01cb1f89f74f96a278796ef61eb687d1a3b80bc15c565b6e42c7431d0d86c140e69c7c650a743
-
SSDEEP
3072:8NJBlBCVBKA4019nML8zgv9T0mN4wlJdUbyeBVQlnTCyZsK5VxCy:KlCyAD19nMLz0Ml7eBV3yZZ3R
Malware Config
Signatures
Files
-
1e98508777187d182687e8abd1ecd7d30b9817bd8f84e4077104fdb5c9dd071b.exe windows x86
de9f7dda708b5676c825dc794cf48170
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetProcAddress
GetModuleHandleA
FreeLibrary
LoadLibraryA
GetModuleFileNameA
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
ReadFile
RtlUnwind
CreateFileA
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapAlloc
HeapFree
GetVersion
lstrlenA
WriteFile
lstrcpyA
LCMapStringW
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
TerminateProcess
VirtualFree
CloseHandle
ExitProcess
user32
SendMessageA
GetClientRect
CopyAcceleratorTableA
BeginPaint
EndPaint
DefWindowProcA
DestroyWindow
PostQuitMessage
MoveWindow
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
ole32
CoUninitialize
CoInitialize
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
comctl32
ord17
shlwapi
PathAppendA
PathRemoveFileSpecA
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xzbyxgy Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE