Static task
static1
Behavioral task
behavioral1
Sample
421e66ff49029b5a7202efefea5687e95da537e65d3f1f922ad3fb2f25e6f4e4.exe
Resource
win7-20220812-en
General
-
Target
421e66ff49029b5a7202efefea5687e95da537e65d3f1f922ad3fb2f25e6f4e4
-
Size
82KB
-
MD5
7165d65f22398bad3f205fc1151c3a72
-
SHA1
511515de1eba0a254407dcc2b614095aec1fd22e
-
SHA256
421e66ff49029b5a7202efefea5687e95da537e65d3f1f922ad3fb2f25e6f4e4
-
SHA512
9810bc50ebe74538591731427f2cb92882e137387933da2893ad12e6ca07c1bb2791472dc82f2176e882958b471eae44d531e2bfb7361b5a0b99a19bb19ef547
-
SSDEEP
1536:VSKhsPHdmC5SkbGSM5UDtElvIHLH1yEXJemWXer6FM3WAs:VSKhsP9tckxM5UD7HcEMlQ6FM3Wr
Malware Config
Signatures
Files
-
421e66ff49029b5a7202efefea5687e95da537e65d3f1f922ad3fb2f25e6f4e4.exe windows x86
287bf13a8ddca573295e5d3772d3921f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
CreateThread
ResetEvent
SetEvent
OpenEventA
GetProcAddress
LoadLibraryA
CloseHandle
FreeLibrary
ExitProcess
WaitForSingleObject
GetEnvironmentStrings
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
OutputDebugStringA
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetFileType
GetStdHandle
HeapCreate
user32
GetMessageA
TranslateMessage
DispatchMessageA
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE