Static task
static1
Behavioral task
behavioral1
Sample
7e0635764b5780aedcb4126c661e4859f61a0e2a64c9dc5d8db00c94fa02f164.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7e0635764b5780aedcb4126c661e4859f61a0e2a64c9dc5d8db00c94fa02f164.exe
Resource
win10v2004-20220812-en
General
-
Target
7e0635764b5780aedcb4126c661e4859f61a0e2a64c9dc5d8db00c94fa02f164
-
Size
301KB
-
MD5
61bb8b121f44b62f5a4e863ff6ceb0f0
-
SHA1
ef227419dc821485a22836576d4e0fae62d6490c
-
SHA256
7e0635764b5780aedcb4126c661e4859f61a0e2a64c9dc5d8db00c94fa02f164
-
SHA512
38bcf7e9f99221c49ac52351cab471b495eeb9f6e656b8a927e8c49de2636282e6dcadaab75bf49a354439a98a117d438d6a0f0073dcb05dd23ea1da31824103
-
SSDEEP
6144:g78nTpnyRPYZWG5U5X5WqoAY7O3Q9KL8W7p7bo:28nkQEG254qFgOgoLxp7bo
Malware Config
Signatures
Files
-
7e0635764b5780aedcb4126c661e4859f61a0e2a64c9dc5d8db00c94fa02f164.exe windows x86
b76405a70fdf47140e7d67c96a9d92d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetLocalTime
GetLocaleInfoA
DeleteFileA
IsBadWritePtr
CancelIo
VirtualProtect
HeapSize
GetFileAttributesA
ReadConsoleW
CreateDirectoryA
ResetEvent
WriteFile
ReleaseMutex
SetLastError
GetModuleHandleA
GetCommandLineA
RemoveDirectoryA
CreateMailslotA
GetDriveTypeW
GetStdHandle
GetProcessHeap
user32
SetCursor
GetCaretPos
PeekMessageA
GetWindowLongW
SetFocus
wsprintfA
DestroyMenu
GetCapture
GetWindowTextW
DispatchMessageA
DrawIcon
PostMessageA
LoadCursorA
els
DllGetClassObject
DllRegisterServer
DllRegisterServer
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ