Static task
static1
Behavioral task
behavioral1
Sample
d6e5f972fd87ea18318667bf8ee6277bf00d8ab478fb10cf1d67e026adf21d7e.exe
Resource
win7-20220812-en
General
-
Target
d6e5f972fd87ea18318667bf8ee6277bf00d8ab478fb10cf1d67e026adf21d7e
-
Size
2.7MB
-
MD5
7654d9f61fd451a79bce34a0d6c81177
-
SHA1
b39aa2321a3c6bfd4c4e926c12b28170f4ff2cf1
-
SHA256
d6e5f972fd87ea18318667bf8ee6277bf00d8ab478fb10cf1d67e026adf21d7e
-
SHA512
b67a109f1f206f69d7e6d4b5062bc0a564fc1ffc067dff56ed00d0719b7d787eba2d83eb6b4beeb7e3a32f9db8286c33e4531be11758953ee6e6cb64464377b0
-
SSDEEP
49152:5oniDu6DiMXGTY7zuyC+vT4U7H3M6cnrwtnwOq:5oniD/DikGTYHuyLvUQksA
Malware Config
Signatures
Files
-
d6e5f972fd87ea18318667bf8ee6277bf00d8ab478fb10cf1d67e026adf21d7e.exe windows x86
b940cadb80c6ab17c0d6c9725b30af77
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
UnmapViewOfFile
HeapFree
lstrcpynW
GetFullPathNameW
SetEnvironmentVariableW
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
Sleep
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW
user32
MessageBoxA
Sections
.text Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.res Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 72KB - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE