Static task
static1
Behavioral task
behavioral1
Sample
b7b2a34d9ae7f7b3472c4fe7acb60e3cd361d3c0da2ff3c98c36569bfa1e3b0c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b7b2a34d9ae7f7b3472c4fe7acb60e3cd361d3c0da2ff3c98c36569bfa1e3b0c.exe
Resource
win10v2004-20220812-en
General
-
Target
b7b2a34d9ae7f7b3472c4fe7acb60e3cd361d3c0da2ff3c98c36569bfa1e3b0c
-
Size
1.2MB
-
MD5
7cc598fd1ac401dd18dcfd69dcb95028
-
SHA1
174eb831c2fb3784f0d8ba471370454fc1c808e4
-
SHA256
b7b2a34d9ae7f7b3472c4fe7acb60e3cd361d3c0da2ff3c98c36569bfa1e3b0c
-
SHA512
c3d4d64aa01ec91d7b3762b33e06fd67a7c2dd6eea7e9c4d694513e4d8c2b586b640d880fb82d2bf641740000e64a63339759c080fdcad23b24233aa838d24ac
-
SSDEEP
24576:h3h+0QptcY+lyk4z2VOAutYCGZkM05bKCuPnCoYjU1onn:Bh1KQ4z2V1/3q5vuPCdjIa
Malware Config
Signatures
Files
-
b7b2a34d9ae7f7b3472c4fe7acb60e3cd361d3c0da2ff3c98c36569bfa1e3b0c.exe windows x86
26bad312af1276f3119cc4696ede01f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempFileNameA
WaitForSingleObject
CreateProcessA
WriteFile
CreateFileA
DeleteFileA
CloseHandle
ReadFile
SetFilePointer
GetFileSize
GetTempPathA
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
OpenProcess
GetCurrentProcessId
WideCharToMultiByte
lstrcpyA
lstrlenA
lstrcatA
GetWindowsDirectoryA
GetVersionExA
GetCurrentProcess
TerminateProcess
GetLocalTime
IsBadReadPtr
GetLastError
MoveFileA
HeapAlloc
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetTimeZoneInformation
GetSystemTime
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
SetUnhandledExceptionFilter
IsBadCodePtr
GetStringTypeA
GetStringTypeW
FlushFileBuffers
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProcAddress
GetFileAttributesA
psapi
GetModuleFileNameExA
Sections
.text Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 380KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ