Static task
static1
Behavioral task
behavioral1
Sample
a7696258b77788a1dc6202249df82dbc876d2aab92affa10a92471d9c8e8cbb3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a7696258b77788a1dc6202249df82dbc876d2aab92affa10a92471d9c8e8cbb3.exe
Resource
win10v2004-20220901-en
General
-
Target
a7696258b77788a1dc6202249df82dbc876d2aab92affa10a92471d9c8e8cbb3
-
Size
224KB
-
MD5
611abb51fbbd675504f8391c29b405ea
-
SHA1
3a2712256ee013f3c366a74cbca8cc255e115c3b
-
SHA256
a7696258b77788a1dc6202249df82dbc876d2aab92affa10a92471d9c8e8cbb3
-
SHA512
f48f2ae97d8dd33c4d3fb736b2ec0f74b53b60bb050c389a7a603dd42e6641f5492937c8683212bde950d73b44fdf30b81cff48b24b6f5de3767d72e56d9eaa1
-
SSDEEP
6144:I0lmSoYApFcSrGyAInflK2uXQHjlSvUhpiJ:I0XoZc4JAInsrXYhkUhp0
Malware Config
Signatures
Files
-
a7696258b77788a1dc6202249df82dbc876d2aab92affa10a92471d9c8e8cbb3.exe windows x86
ad46c19993067bdc52e09f3c57f82fc8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
HeapSize
RtlUnwind
HeapReAlloc
lstrlenA
VirtualAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSection
LoadLibraryA
FreeLibrary
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
WriteFile
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
Sleep
InterlockedDecrement
GetLastError
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
ExitProcess
GetModuleHandleA
GetProcAddress
ole32
CoRegisterMallocSpy
StringFromGUID2
CLSIDFromString
comdlg32
GetOpenFileNameA
shlwapi
StrStrA
shell32
ShellExecuteExW
Sections
.text Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 38B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ