Static task
static1
Behavioral task
behavioral1
Sample
7d5bc873cc54f16b37148488f146d8a71cf1c90a2614a8e55499a294d8e328ca.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7d5bc873cc54f16b37148488f146d8a71cf1c90a2614a8e55499a294d8e328ca.exe
Resource
win10v2004-20220901-en
General
-
Target
7d5bc873cc54f16b37148488f146d8a71cf1c90a2614a8e55499a294d8e328ca
-
Size
51KB
-
MD5
964383efa1de80095a78ed9251a91220
-
SHA1
55072fef541d6ad17b7ce161902a32efd5a63058
-
SHA256
7d5bc873cc54f16b37148488f146d8a71cf1c90a2614a8e55499a294d8e328ca
-
SHA512
cf1649e76a51a35e07a95444fbb92fb791c35e0370e7a2db35b2093c822c4606edd07315d73c5dbb123139e9e4366234c9b3943ec778ae12dc2e631bb92ca8d1
-
SSDEEP
1536:hqa+kwt1hohx6Q2oIKGlB+Skfu42aax3j8Moe+2:8a+RohgQ2olGlwVd2aax3j8Mu2
Malware Config
Signatures
Files
-
7d5bc873cc54f16b37148488f146d8a71cf1c90a2614a8e55499a294d8e328ca.exe windows x86
51cc867a15a34da8540b5d70d2ba2951
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetTickCount
InterlockedIncrement
Sleep
VirtualFree
InterlockedIncrement
Sleep
VirtualFree
msimg32
AlphaBlend
GradientFill
ole32
OleDraw
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
IsValidPtrIn
IsValidPtrOut
CoTaskMemFree
CoTaskMemAlloc
ProgIDFromCLSID
StringFromCLSID
CoCreateInstance
CoLockObjectExternal
CoDisconnectObject
CoRevokeClassObject
CoRegisterClassObject
CoGetClassObject
CoGetMalloc
CoUninitialize
CoInitialize
advapi32
SetTokenInformation
SetSecurityDescriptorDacl
RegSetValueExW
RegSetValueExA
RegQueryValueExW
Sections
.text Size: 1024B - Virtual size: 877B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ