Static task
static1
Behavioral task
behavioral1
Sample
7b164b5e027576e6734b5b887de7b653d6fb4083eddb24de40907ab1645ca861.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7b164b5e027576e6734b5b887de7b653d6fb4083eddb24de40907ab1645ca861.exe
Resource
win10v2004-20220812-en
General
-
Target
7b164b5e027576e6734b5b887de7b653d6fb4083eddb24de40907ab1645ca861
-
Size
300KB
-
MD5
84639f3f931d15ad31e367e130ef3850
-
SHA1
2501aa3cb4dd9e00945857a66483a15c78dd04fc
-
SHA256
7b164b5e027576e6734b5b887de7b653d6fb4083eddb24de40907ab1645ca861
-
SHA512
3f34f79fe085217601b1327ccb18c74466de93f51593ca46029949a3e087f68b215f4051c8dfb52ac2be4af91e360c13fec7d7186e8d7a17856111390494d9f0
-
SSDEEP
6144:TZqTz0a6DiSDsZ/AQUQYPddTU/vx3Q9zGRyoVLbidv6LD4JPFCte:TARSg/vIU/vx3Q9qRyJdv6e4A
Malware Config
Signatures
Files
-
7b164b5e027576e6734b5b887de7b653d6fb4083eddb24de40907ab1645ca861.exe windows x86
cb7d9128b14d2b12945726d7aacc2f31
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualProtect
GetProcessHeap
GetLocaleInfoA
IsBadWritePtr
GetStdHandle
SetLocalTime
DeleteFileA
GetCommandLineA
ReleaseMutex
CreatePipe
HeapSize
RemoveDirectoryA
WriteFile
GetPriorityClass
CreateDirectoryA
SetLastError
ResetEvent
GetModuleHandleA
GetDriveTypeA
ReadConsoleW
GetFileAttributesA
user32
LoadCursorA
GetWindowLongW
SetFocus
wsprintfA
DestroyMenu
DispatchMessageA
PeekMessageA
PostMessageA
DrawIcon
GetWindowTextW
GetCapture
GetCaretPos
SetCursor
els
DllRegisterServer
DllGetClassObject
DllGetClassObject
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ