?V_T@@YAKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
0f7db367c1f14ec66d2e695a20bfda150984b7a248df2bd5c4b50431fe4563de.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0f7db367c1f14ec66d2e695a20bfda150984b7a248df2bd5c4b50431fe4563de.exe
Resource
win10v2004-20220901-en
General
-
Target
0f7db367c1f14ec66d2e695a20bfda150984b7a248df2bd5c4b50431fe4563de
-
Size
444KB
-
MD5
0ee362e8d9cec92f0bdbf596dbde2e51
-
SHA1
b1755b01e7d3819f9dad07008ed39df14a7c516e
-
SHA256
0f7db367c1f14ec66d2e695a20bfda150984b7a248df2bd5c4b50431fe4563de
-
SHA512
7cce98ba9756d2abdf2456cd87bbc356674bc18101253a911f480a3f37d214816726c9074e3c66e61833f7a08661d940d709c6b8046ad403dd2300b6bedce74b
-
SSDEEP
12288:oEmBDGTIdIz72bjH9pcA4z8WuC505pUYMWO6:4BacSGbj0L8WuOuUo
Malware Config
Signatures
Files
-
0f7db367c1f14ec66d2e695a20bfda150984b7a248df2bd5c4b50431fe4563de.exe windows x86
2dc7441b54f05c69f2f158f59533e0bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
CreateProcessA
GetTickCount
VirtualFree
OpenEventA
VirtualAlloc
DeleteFileA
ResumeThread
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
TerminateProcess
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
HeapFree
LoadLibraryA
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
InitializeCriticalSection
HeapReAlloc
RtlUnwind
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
user32
EnableWindow
GetFocus
LoadBitmapA
DestroyWindow
SetActiveWindow
ole32
CoCreateInstance
CoUninitialize
CoInitialize
ws2_32
WSAGetLastError
winmm
mmioRenameA
midiStreamRestart
dnsapi
DnsAcquireContextHandle_A
Exports
Exports
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 408KB - Virtual size: 869KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ