Static task
static1
Behavioral task
behavioral1
Sample
907ae2e706762d028c58b46844595f45c216455a0e68cab3f20f6956732d5c1b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
907ae2e706762d028c58b46844595f45c216455a0e68cab3f20f6956732d5c1b.exe
Resource
win10v2004-20220812-en
General
-
Target
907ae2e706762d028c58b46844595f45c216455a0e68cab3f20f6956732d5c1b
-
Size
149KB
-
MD5
7c6756f116e3e5915f255de100879129
-
SHA1
4f66fe18e345f6f707811d026c6cbd7ce2d2831a
-
SHA256
907ae2e706762d028c58b46844595f45c216455a0e68cab3f20f6956732d5c1b
-
SHA512
46af09ad962791f79c89cb4b0ea35078ad5eb14018d3a5843ef755c7c98c2a95c3db337a55d3eed75d79a4d8e7201d1ff7068f53119eba4511b5be5a20251249
-
SSDEEP
3072:BtgACFxBaj+nL4IkcRDNiHGG6C5LQ+hjXy5GXxLwOyR/2+KTQsrcFvh/fMnbxc/i:Bt9YxMj+L4hmHEXyYXOOSg3Q0bxmz
Malware Config
Signatures
Files
-
907ae2e706762d028c58b46844595f45c216455a0e68cab3f20f6956732d5c1b.exe windows x86
704fa13ffa31ae952e4f12c15047efb2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextVolumeMountPointA
SetThreadPriorityBoost
CloseHandle
GetOverlappedResult
EnumResourceTypesA
BackupWrite
IsValidLocale
SizeofResource
GetDiskFreeSpaceExA
GetThreadTimes
QueryPerformanceFrequency
SystemTimeToFileTime
lstrcpynW
GetFileAttributesA
SetVolumeLabelA
Process32NextW
GetSystemInfo
FindResourceExW
CreateWaitableTimerW
FreeEnvironmentStringsA
DeleteTimerQueueEx
Sleep
GlobalUnWire
GetEnvironmentVariableW
GetProcessShutdownParameters
SignalObjectAndWait
RemoveDirectoryW
GlobalMemoryStatus
EnumDateFormatsA
GetLogicalDrives
GetSystemWindowsDirectoryW
GetDiskFreeSpaceW
FindResourceExA
LocalShrink
CreateDirectoryA
WritePrivateProfileStringA
version
GetFileVersionInfoSizeW
user32
GetMenuContextHelpId
TabbedTextOutW
DestroyMenu
VkKeyScanW
GetCursorPos
GetParent
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 455B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nkxblrq Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE