Static task
static1
Behavioral task
behavioral1
Sample
f7feebbb33a7395fd728b7954f24ec539a52f4238dae0524ab007313cea0890e.exe
Resource
win7-20220901-en
General
-
Target
f7feebbb33a7395fd728b7954f24ec539a52f4238dae0524ab007313cea0890e
-
Size
196KB
-
MD5
6375c29c67ccedc16d9643a2bc8da761
-
SHA1
9fd5216ad33a69a0b588cab9001b1795476d1af3
-
SHA256
f7feebbb33a7395fd728b7954f24ec539a52f4238dae0524ab007313cea0890e
-
SHA512
539f2555884a10cfd11003d39cca3d1bcc294b53c7af973c18aef52071532889fa058b66056e1a48a48200ef785bf1ad96d98927bd7cfb353be0ad428fbdd954
-
SSDEEP
3072:gdyGanW2F1+y5KK5gfAE/84hI7qVAF3NKq1G1jzWCxndri:3GanW2F1+y5D2fAn4hUF3w5jaM4
Malware Config
Signatures
Files
-
f7feebbb33a7395fd728b7954f24ec539a52f4238dae0524ab007313cea0890e.exe windows x86
aec61825121ffd4d7a6cf3883e565b04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetCurrentProcess
GetLastError
CreateDirectoryA
DeleteFileA
SetFileAttributesA
GetFileAttributesA
GetSystemDirectoryA
GetModuleHandleA
GetProcAddress
Sleep
ExitProcess
GetTickCount
IsBadWritePtr
LoadLibraryA
GetCurrentDirectoryA
GetTempPathA
MoveFileA
WriteFile
SetFilePointer
CreateFileA
SleepEx
GetModuleFileNameA
CreateEventA
WaitForSingleObject
ExpandEnvironmentStringsA
SetEnvironmentVariableA
SetUnhandledExceptionFilter
CreateProcessA
GetStartupInfoA
CopyFileA
GetCommandLineA
GetCurrentThreadId
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
msvcrt
strncmp
_except_handler3
memset
srand
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
_controlfp
_itoa
memmove
__CxxFrameHandler
tolower
_ftol
rand
ws2_32
closesocket
getprotobynumber
Sections
.aspack Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 164KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ