Static task
static1
Behavioral task
behavioral1
Sample
7813278f33fc5bf80070d51f682f4056719058ace406e42586be2b0197fe584f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7813278f33fc5bf80070d51f682f4056719058ace406e42586be2b0197fe584f.exe
Resource
win10v2004-20220901-en
General
-
Target
7813278f33fc5bf80070d51f682f4056719058ace406e42586be2b0197fe584f
-
Size
272KB
-
MD5
7c880fac7b7102d8691ee31042e4bdc0
-
SHA1
f3f1b3f6740fd1284ae72a7d31a6d896d08141d9
-
SHA256
7813278f33fc5bf80070d51f682f4056719058ace406e42586be2b0197fe584f
-
SHA512
ab81c5f645aff27cc286bf5bf5208b4d605144ef7c95c96895b7c7d81ee75bf4929f6aa12fa70763b202653e143939764f12e1a8bbe8614103f74b8c37fd8898
-
SSDEEP
6144:Taoex/JTc7V6cVcf8AIkGAVNo0ASy2kOjJSeGj22yBZbDjHUlPa:xeJ2V6cvPkGchA9gjFpfka
Malware Config
Signatures
Files
-
7813278f33fc5bf80070d51f682f4056719058ace406e42586be2b0197fe584f.exe windows x86
55efa873a275ba9b0b6ae094ba62daab
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
fmifs
DiskCopy
Chkdsk
ComputeFmMediaType
FormatEx
Format
Extend
EnableVolumeCompression
w32topl
ToplScheduleExportReadonly
ToplScheduleCacheDestroy
ToplSTHeapInit
ToplSTHeapDestroy
ToplSTHeapExtractMin
ToplScheduleCreate
ToplScheduleCacheCreate
ToplScheduleDuration
kernel32
GetOEMCP
GetProcessHeap
SystemTimeToFileTime
GetCurrentProcessId
QueryPerformanceCounter
HeapFree
WideCharToMultiByte
GetCurrentProcess
HeapAlloc
lstrlenW
GetTickCount
lstrcmpA
lstrcpyW
FindResourceW
SetLastError
GetLocaleInfoW
CloseHandle
MultiByteToWideChar
GetLocalTime
LoadLibraryA
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
CreateFileA
Sections
.text Size: 267KB - Virtual size: 298KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 964B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ