Static task
static1
Behavioral task
behavioral1
Sample
7e803ed1e02e9c5dd880a49bbb86037c17714fdcb20932f0c1f96b7f9d254bca.exe
Resource
win7-20220812-en
General
-
Target
7e803ed1e02e9c5dd880a49bbb86037c17714fdcb20932f0c1f96b7f9d254bca
-
Size
163KB
-
MD5
7bf0c6184e5207434bd3adba1aa010f0
-
SHA1
11b60b4d59f3b10541d60f400f989e9725d93ea5
-
SHA256
7e803ed1e02e9c5dd880a49bbb86037c17714fdcb20932f0c1f96b7f9d254bca
-
SHA512
f3ad60594ac868d97c8656c903620d2c9abc4171c287161ea6d924d444fd18faa4de97a9dbdd944ea986853469d88d46b03c1e578cda43df66c3e0adbff43314
-
SSDEEP
3072:xbJApgaRbbwnzK+fR7aFJ0VfvjZwVzFkKc0U5QTyC2ZJOSMYauQ65fEo2Sh:gpgSbbWz75azUvjwKK9k/JtbnQ65x
Malware Config
Signatures
Files
-
7e803ed1e02e9c5dd880a49bbb86037c17714fdcb20932f0c1f96b7f9d254bca.exe windows x86
7a30faa2d75ff5a33306b67574b980b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
EnterCriticalSection
GetVersionExW
FindClose
ExpandEnvironmentStringsW
LeaveCriticalSection
LoadLibraryA
GetFileAttributesW
ReadFile
GetComputerNameW
GetModuleFileNameW
GetModuleHandleW
GetACP
WriteFile
InitializeCriticalSection
GetFileSizeEx
LoadLibraryW
DeleteCriticalSection
FindFirstFileW
SetFilePointer
CloseHandle
CreateFileW
GetProcAddress
GetLocaleInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
RaiseException
Sleep
HeapSize
ExitProcess
GetCPInfo
GetOEMCP
IsValidCodePage
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
RtlUnwind
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
advapi32
GetUserNameW
shell32
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE