Static task
static1
Behavioral task
behavioral1
Sample
2e7a7761fd87240ddb9265a7963953baba41def06b27129126c1818804872a4d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2e7a7761fd87240ddb9265a7963953baba41def06b27129126c1818804872a4d.exe
Resource
win10v2004-20220812-en
General
-
Target
2e7a7761fd87240ddb9265a7963953baba41def06b27129126c1818804872a4d
-
Size
242KB
-
MD5
96ed23abc0d2a29f265361dff6948270
-
SHA1
e843913fa4a3da9ad647f5ac2da394cd1dbd71a9
-
SHA256
2e7a7761fd87240ddb9265a7963953baba41def06b27129126c1818804872a4d
-
SHA512
587ab0067b381c7d1815429bcdac4b6315ab84cb5ce4ffa0953c4bf62bfd0183495e4d85b8e1b331b7a2264c2c585fde2a26ba6e5afa19eaf1f08c29f643e604
-
SSDEEP
3072:LOAIuuX1jJUA7v9urWFbt5Hbpv14YrnV/Emibxp9p0RVHNKY45UnuwI7bWLFL6:lsXlJT1Jv4+nVspzK1NF9Qce
Malware Config
Signatures
Files
-
2e7a7761fd87240ddb9265a7963953baba41def06b27129126c1818804872a4d.exe windows x86
702c4f9029a9646cac30a0e8a6b8395d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SizeofResource
LockResource
LoadResource
FindResourceExA
LocalFree
FormatMessageA
CreateFileA
CloseHandle
DeviceIoControl
GetLastError
ReadFile
WriteFile
SetFilePointer
GetVolumeInformationA
FlushFileBuffers
GetLogicalDrives
GetModuleFileNameA
SetErrorMode
SetEndOfFile
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleA
ExitProcess
GetSystemTimeAsFileTime
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
RtlUnwind
MultiByteToWideChar
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
RaiseException
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
Sleep
LoadLibraryA
InitializeCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
VirtualAlloc
HeapReAlloc
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
user32
wsprintfA
shell32
ShellExecuteA
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE