Static task
static1
Behavioral task
behavioral1
Sample
7917a55b5f21f43140b8f4c1188557b1060e28f92c43536d239438faaab3abd8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7917a55b5f21f43140b8f4c1188557b1060e28f92c43536d239438faaab3abd8.exe
Resource
win10v2004-20220901-en
General
-
Target
7917a55b5f21f43140b8f4c1188557b1060e28f92c43536d239438faaab3abd8
-
Size
92KB
-
MD5
a242d7ef8dd3f165035cc2fe62b2c2e0
-
SHA1
d210655936af174717b9b054e789184460136979
-
SHA256
7917a55b5f21f43140b8f4c1188557b1060e28f92c43536d239438faaab3abd8
-
SHA512
7eb7f38920ee368b1ddd74f93ae33659a8e4c2b8f3f45d822eb704009d90ab111bda3f19c325e7e1cad3d2c2cb343dffb3f633ac31d14cceb08231485d3d85f1
-
SSDEEP
1536:dMB94YZLCfVBQbS/owDdLT+daDxAA3WtQBLFF:dMB9XsV9/D51AAmtcLFF
Malware Config
Signatures
Files
-
7917a55b5f21f43140b8f4c1188557b1060e28f92c43536d239438faaab3abd8.exe windows x86
bae34b1be77e5567b10313e80f6ca54e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sleep
OutputDebugStringA
FreeLibrary
WideCharToMultiByte
GlobalFree
GlobalAlloc
ExitProcess
CloseHandle
WriteFile
GetWindowsDirectoryA
GetSystemDefaultUILanguage
GlobalMemoryStatusEx
GetVersionExA
GetCurrentProcess
CreateProcessA
DeleteFileA
ReleaseMutex
OpenMutexA
InterlockedExchange
CreateThread
WaitForSingleObject
GetLastError
CreateMutexA
GetStartupInfoA
ResumeThread
SetThreadPriority
GetCurrentThread
SetPriorityClass
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
SetFileAttributesA
lstrcmpiA
GetModuleHandleA
SetErrorMode
VirtualAlloc
TerminateProcess
VirtualFree
SetFilePointer
RtlUnwind
RaiseException
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
HeapReAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
IsBadReadPtr
IsBadCodePtr
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalAlloc
Sections
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ