Static task
static1
Behavioral task
behavioral1
Sample
7fb59376915a6244827040d154c251f7bd42f5e532b6a10ae9a3472d9e02e028.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7fb59376915a6244827040d154c251f7bd42f5e532b6a10ae9a3472d9e02e028.exe
Resource
win10v2004-20220812-en
General
-
Target
7fb59376915a6244827040d154c251f7bd42f5e532b6a10ae9a3472d9e02e028
-
Size
480KB
-
MD5
9016e405d85595fe9a57c0b7e1f14000
-
SHA1
cf1253784b212ad09f3f878a6c49f58d59a0b810
-
SHA256
7fb59376915a6244827040d154c251f7bd42f5e532b6a10ae9a3472d9e02e028
-
SHA512
dfd2aafa0e4e3d6e5a47ed7ce1f92377347e1e909ac2a577487c7456bcfdf3a8e049220a3e5b804597fc5d366d8c5a9a55cf5535b5878d6a786a47d4d34e13fa
-
SSDEEP
12288:92QpwJ/U7IvF3F+4VhtQdXUDvcIJ+ns2zNYrMFR/X:92l93Y4VDQlSUIJgDYg
Malware Config
Signatures
Files
-
7fb59376915a6244827040d154c251f7bd42f5e532b6a10ae9a3472d9e02e028.exe windows x86
d1ac2dd914f91d664bf9d8ffd57c0343
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwFreeVirtualMemory
advapi32
AddAce
kernel32
GetCurrentProcessId
GetCommandLineA
user32
GetClipboardViewer
Sections
.text Size: 473KB - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 304B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE