Static task
static1
Behavioral task
behavioral1
Sample
7968508d031f70b6072978d980de5038591efbe25f15bae0d5a366d7d94764d1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7968508d031f70b6072978d980de5038591efbe25f15bae0d5a366d7d94764d1.exe
Resource
win10v2004-20220812-en
General
-
Target
7968508d031f70b6072978d980de5038591efbe25f15bae0d5a366d7d94764d1
-
Size
837KB
-
MD5
80bf85d5a06f2df276a4d5e2875ae714
-
SHA1
bbad6c10d56aeb28032571aa6fd9cc88c7d24e54
-
SHA256
7968508d031f70b6072978d980de5038591efbe25f15bae0d5a366d7d94764d1
-
SHA512
33dc9f93ba038fc278a08b096013e82f654080c563accb2a60018f45cab72702479fa8a1bf26cf20155ca73dfd302f43142b1c7675213a941c1c94a3302db761
-
SSDEEP
24576:QRYUIGly99Fa5tdwaoBHYapTKuvhcxVoa:QRYN0y99edwFGaTKuvSu
Malware Config
Signatures
Files
-
7968508d031f70b6072978d980de5038591efbe25f15bae0d5a366d7d94764d1.exe windows x86
953fe387d34fe75019b38aabc372ac31
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteConsoleW
GetTickCount
GetStringTypeA
GetShortPathNameW
OpenEventW
GetCurrentProcess
SetStdHandle
SetVolumeLabelA
LoadLibraryA
GetPrivateProfileIntW
GetVolumePathNameA
CreateEventA
lstrcatW
HeapFree
CreateMutexW
HeapCreate
lstrcpyA
SetEnvironmentVariableA
GetVolumeInformationW
netshell
HrCreateDesktopIcon
HrLaunchConnection
HrRenameConnection
NcFreeNetconProperties
Sections
.text Size: 23KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pdata Size: 4KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.odata Size: 802KB - Virtual size: 801KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE