Static task
static1
Behavioral task
behavioral1
Sample
7d4453ce7f3c6399fa2421b5ef040c008c29df47443130702f61a23aa3692f5c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7d4453ce7f3c6399fa2421b5ef040c008c29df47443130702f61a23aa3692f5c.exe
Resource
win10v2004-20220901-en
General
-
Target
7d4453ce7f3c6399fa2421b5ef040c008c29df47443130702f61a23aa3692f5c
-
Size
119KB
-
MD5
0c05951f4874cb1c09bd728ed1f3b430
-
SHA1
3018ada9b65d7d327e4d98f9c85cf3f18d284b38
-
SHA256
7d4453ce7f3c6399fa2421b5ef040c008c29df47443130702f61a23aa3692f5c
-
SHA512
c77ef6b35218a7287113635b6041ce4a98617fa6a15aa752a9cb11d5009ae943b89a528458f2543512aa2d64548fcfe1c777143d4e785f152f0c3b3c92eb6669
-
SSDEEP
3072:wxSUtawtgf2NTYpS233eIMNIKFVrhyvoaor:JUke13Io/8Qas
Malware Config
Signatures
Files
-
7d4453ce7f3c6399fa2421b5ef040c008c29df47443130702f61a23aa3692f5c.exe windows x86
ad4d3eb6170f6b75d632db185a7621cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteConsoleW
GetStdHandle
GetStartupInfoA
SuspendThread
DisconnectNamedPipe
lstrcpyW
GetFileAttributesA
CloseHandle
GetModuleHandleA
GetLastError
SetEvent
WriteConsoleW
GetPriorityClass
GetCurrentDirectoryA
ClearCommBreak
lstrlenW
WriteConsoleW
CopyFileW
IsDebuggerPresent
HeapCreate
CreatePipe
msftedit
RichComboBoxWndProc
RichEditWndProc
SetCustomTextOutHandlerEx
RichListBoxWndProc
shell32
SHGetMalloc
ShellAboutA
DragAcceptFiles
ShellMessageBoxA
DuplicateIcon
StrChrA
DragFinish
SHGetDiskFreeSpaceA
SHFree
DllUnregisterServer
DragQueryFileA
ExtractIconA
SHGetSettings
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impdata Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE