Static task
static1
Behavioral task
behavioral1
Sample
7161238e8f17b5fb317f0d4f0ed4641195d23efa476acee8a02766f7d4f8271d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7161238e8f17b5fb317f0d4f0ed4641195d23efa476acee8a02766f7d4f8271d.exe
Resource
win10v2004-20220812-en
General
-
Target
7161238e8f17b5fb317f0d4f0ed4641195d23efa476acee8a02766f7d4f8271d
-
Size
209KB
-
MD5
80ba937a58619a6cddbe996688e9d2de
-
SHA1
3c7569fd4e99f7854bbc37fa7c6f7025ad947275
-
SHA256
7161238e8f17b5fb317f0d4f0ed4641195d23efa476acee8a02766f7d4f8271d
-
SHA512
9b044551e084da855e27eb7b2313c58c15f2c6875023c1929e0aa7fbe916dabe5e34b4cbb994e1deafecf7a133fd935008bd880ceb5aa19ea6aa6cc66d765918
-
SSDEEP
6144:n3RrIqnak7CJzLnZMyjMy0tU2i2tKsZI9CMiwJQS0ItUjKz:n3NIqaCCJzDZTgy0S2kugi1SgKz
Malware Config
Signatures
Files
-
7161238e8f17b5fb317f0d4f0ed4641195d23efa476acee8a02766f7d4f8271d.exe windows x86
1e737b59eb77d8a8ae7b820fac2eb9d8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
DeviceIoControl
CloseHandle
SetLastError
GetProcessHeap
GetEnvironmentStringsA
LoadLibraryW
GetTickCount
WideCharToMultiByte
lstrcpyA
FreeResource
CreateFileA
GetCurrentProcessId
FindResourceA
GetSystemTimeAsFileTime
GetCurrentProcess
GetModuleHandleW
QueryPerformanceCounter
GetLocalTime
lstrcmpA
MultiByteToWideChar
QueryDosDeviceA
HeapFree
lstrlenA
GetVolumeInformationA
SystemTimeToFileTime
SetUnhandledExceptionFilter
LockResource
HeapAlloc
advapi32
RegOpenKeyW
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
pdh
PdhAddCounterW
PdhBrowseCountersA
PdhBindInputDataSourceA
PdhAdd009CounterA
PdhBindInputDataSourceW
PdhAddCounterA
pautoenr
CertAutoEnrollment
CertAutoRemove
osuninst
IsUninstallImageValid
RemoveUninstallImage
ProvideUiAlerts
GetUninstallImageSize
user32
CharNextA
wsprintfA
Sections
.text Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ