Static task
static1
Behavioral task
behavioral1
Sample
907e9eacc5b437d9ab2830fff0d7eb50914e30a1fb92e4d8a0378cea9474d5bf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
907e9eacc5b437d9ab2830fff0d7eb50914e30a1fb92e4d8a0378cea9474d5bf.exe
Resource
win10v2004-20220812-en
General
-
Target
907e9eacc5b437d9ab2830fff0d7eb50914e30a1fb92e4d8a0378cea9474d5bf
-
Size
604KB
-
MD5
96f341bb9a005a2df7e7645a87097a3e
-
SHA1
f93f604244e524b90985fac34a8bcd16c92515ac
-
SHA256
907e9eacc5b437d9ab2830fff0d7eb50914e30a1fb92e4d8a0378cea9474d5bf
-
SHA512
ea4773295d80af54ad72ae038e7402fe8bf50d8650f55d2ce7f57dd23ba96f6b2d83026351d789e459467eae0e6fe098caaf4521d4cd1020421670200ecaeb28
-
SSDEEP
12288:zwptfjzgz33R49IdbNkk0irEtUwDoD/u2stRrAlbYVTeg:oLzgz33MgNkFi6UwDaKvMWKg
Malware Config
Signatures
Files
-
907e9eacc5b437d9ab2830fff0d7eb50914e30a1fb92e4d8a0378cea9474d5bf.exe windows x86
0f7f1e484dd48aec205427d15c621e13
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
RemoveDirectoryA
ExitProcess
TerminateProcess
ReadFile
CreateThread
DeleteFileA
ResumeThread
HeapAlloc
GetProcessHeap
SetThreadPriority
ReleaseMutex
VirtualAlloc
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetStartupInfoA
GetCommandLineA
GetVersionExA
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
RaiseException
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
QueryPerformanceCounter
VirtualQuery
user32
LoadImageA
oleaut32
VariantInit
VariantClear
ws2_32
select
Sections
.STR Size: 4KB - Virtual size: 967B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 536KB - Virtual size: 533KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ