Static task
static1
Behavioral task
behavioral1
Sample
7e73dccefbc3480bddd64e4cec85dd8eef1b6482e0b27ccb8175255807a95d69.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7e73dccefbc3480bddd64e4cec85dd8eef1b6482e0b27ccb8175255807a95d69.exe
Resource
win10v2004-20220812-en
General
-
Target
7e73dccefbc3480bddd64e4cec85dd8eef1b6482e0b27ccb8175255807a95d69
-
Size
138KB
-
MD5
16e077db625718a7c38477e95715c270
-
SHA1
d2e41e1ec94cccc5b8d9a954d44c1be6a124988d
-
SHA256
7e73dccefbc3480bddd64e4cec85dd8eef1b6482e0b27ccb8175255807a95d69
-
SHA512
f9c61d09548ac4f22a5256352fb2f8a06e91c3a66c1c09a6e67f1fb379e74448bbdc12de35bf8d3a9def836ef43b27b7adee929bead26b719400fa01fed876ea
-
SSDEEP
3072:35FeBleNP8ucWIbTrUOIi8os4/pwSq46tmvmHYerwrNZ0C7:pPoTQZi8o/I4cYerwrNr7
Malware Config
Signatures
Files
-
7e73dccefbc3480bddd64e4cec85dd8eef1b6482e0b27ccb8175255807a95d69.exe windows x86
e4207e9b7c6f0ea3333d4fedaad46b08
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfoExW
FoldStringA
EnumUILanguagesW
DefineDosDeviceA
EnumSystemLanguageGroupsA
WaitForSingleObject
CancelWaitableTimer
GlobalAddAtomA
LockFileEx
OpenSemaphoreA
lstrcmpiA
GetFileType
GetPrivateProfileSectionNamesW
SwitchToThread
GetComputerNameW
MapViewOfFile
EnumCalendarInfoW
GetUserDefaultLCID
GetFileAttributesExW
SetPriorityClass
VerSetConditionMask
Thread32First
QueueUserWorkItem
FindVolumeMountPointClose
CreateHardLinkA
_lread
GetFileInformationByHandle
GlobalUnWire
GetSystemDefaultLCID
PeekNamedPipe
FindNextVolumeMountPointW
SetCalendarInfoA
LocalShrink
DebugBreak
GetDateFormatA
GlobalMemoryStatus
user32
GetInputState
SetFocus
TranslateMDISysAccel
Sections
.text Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE