Static task
static1
Behavioral task
behavioral1
Sample
7df7100f4d9622c5447f63c16d2ffcc489f78608a6d57010392f7ae325be3c38.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7df7100f4d9622c5447f63c16d2ffcc489f78608a6d57010392f7ae325be3c38.exe
Resource
win10v2004-20220812-en
General
-
Target
7df7100f4d9622c5447f63c16d2ffcc489f78608a6d57010392f7ae325be3c38
-
Size
300KB
-
MD5
a34c0c48cced55b8444df46c6be6c9b0
-
SHA1
ae9bc0fe9ccbf16bcc7bf6751734692721cd9e27
-
SHA256
7df7100f4d9622c5447f63c16d2ffcc489f78608a6d57010392f7ae325be3c38
-
SHA512
3a1a309ce265cfbf7c9078655f92c9e8f768de33be89508d757bea5b59acc945d0dda6ffd7860929d383494f50d27c7db7bd87b99e2e7c0470632dcd92a01feb
-
SSDEEP
6144:XMzbjRDfGY8yIhBjIpseXCdeJOHER9ZbAlifTh1fE:8NaYrUeTXLJOkR9Z8li7/E
Malware Config
Signatures
Files
-
7df7100f4d9622c5447f63c16d2ffcc489f78608a6d57010392f7ae325be3c38.exe windows x86
0572a9348225cdfd4a870e2cc59d0cbc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteFile
SetLocalTime
SuspendThread
IsBadReadPtr
DeleteFileA
GetModuleHandleA
GetFileAttributesA
GetPriorityClass
ResetEvent
GlobalSize
GetStdHandle
ReleaseMutex
GetCommandLineA
ReadConsoleW
VirtualProtect
GetDriveTypeA
GetProcessHeap
CreateDirectoryA
HeapSize
GetLocaleInfoA
CreatePipe
user32
DrawIcon
wsprintfA
LoadCursorA
GetWindowLongW
GetCapture
PeekMessageA
GetWindowTextW
DispatchMessageA
SetFocus
GetMessageW
GetCaretPos
SetCursor
DestroyMenu
els
DllGetClassObject
DllGetClassObject
DllRegisterServer
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 444B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ