Static task
static1
Behavioral task
behavioral1
Sample
7a0186cf8d6e66cc00b4175a1286e34e893399c4de9ec8f5c68c4c6c7734f21b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7a0186cf8d6e66cc00b4175a1286e34e893399c4de9ec8f5c68c4c6c7734f21b.exe
Resource
win10v2004-20220901-en
General
-
Target
7a0186cf8d6e66cc00b4175a1286e34e893399c4de9ec8f5c68c4c6c7734f21b
-
Size
176KB
-
MD5
0bc3c139a1e1a1df43637ea32af452c0
-
SHA1
987448588667f259079cb7859845ca5aa86af007
-
SHA256
7a0186cf8d6e66cc00b4175a1286e34e893399c4de9ec8f5c68c4c6c7734f21b
-
SHA512
09bc18393a5ecda27491d090e520b65577a66f7b4940422d04a93a330bdf328564821d0bf9480be1dfd8204142ee7fe88a9eef108b6320068b53357fb6ee8b2f
-
SSDEEP
3072:W6sUz0GMogMKlMOnaK+nuQQL9xNR3aqJYQlFIKTAlnkP:W6sXG4XKqZshO9PR3zJYQlwn8
Malware Config
Signatures
Files
-
7a0186cf8d6e66cc00b4175a1286e34e893399c4de9ec8f5c68c4c6c7734f21b.exe windows x86
ad3750b6d9cd036ee10d48c7f8d37525
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
ExitProcess
GetModuleHandleA
CreateThread
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetStringTypeW
user32
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
RegisterClassExA
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE