?DataBlock@@YGXUverifyEw@CA7
Static task
static1
Behavioral task
behavioral1
Sample
90bd42146a397f05d080c977f0037991c00e8b679153a9dce23caf1e1e17e310.exe
Resource
win7-20220812-en
General
-
Target
90bd42146a397f05d080c977f0037991c00e8b679153a9dce23caf1e1e17e310
-
Size
89KB
-
MD5
7c19d6e691f7ac2d5308277874fbde34
-
SHA1
9a6f7140e34ecdbc7a2d5e3b900942314592a4fa
-
SHA256
90bd42146a397f05d080c977f0037991c00e8b679153a9dce23caf1e1e17e310
-
SHA512
ee72f7c2498f37c411aba4579af6e15a58ee790c073f0ea5faf46f1d662c6a95641218ab0cbe747f1db6c84d25514c201209c4ebffbf285e5643cb27448cef67
-
SSDEEP
1536:XL7hqt2ikjRD6U4XAXA84Y43xtJCvg678OKfebF:7VC2xD6lAQ84Bx7lw/bF
Malware Config
Signatures
Files
-
90bd42146a397f05d080c977f0037991c00e8b679153a9dce23caf1e1e17e310.exe windows x86
42c4ddaf02fb4691670d633ec0d3a36c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrRChrA
StrToIntExA
PathIsPrefixA
StrChrA
UrlGetPartA
PathGetDriveNumberA
PathIsFileSpecW
StrRStrIA
kernel32
lstrcatW
user32
IsCharAlphaNumericW
GetMessagePos
Exports
Exports
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tier2 Size: 1024B - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 32KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tier1 Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tier4 Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tier3 Size: 512B - Virtual size: 184B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ