Static task
static1
Behavioral task
behavioral1
Sample
7fdaf809ef2a886a2077eabf3cc1ed6f4615929216c55a02133a915acf78f49c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7fdaf809ef2a886a2077eabf3cc1ed6f4615929216c55a02133a915acf78f49c.exe
Resource
win10v2004-20220812-en
General
-
Target
7fdaf809ef2a886a2077eabf3cc1ed6f4615929216c55a02133a915acf78f49c
-
Size
279KB
-
MD5
913736c45cd1c3fba2c943ff798c1580
-
SHA1
2ab1a477eaf4e45b20cdd134e922caa997fbe94f
-
SHA256
7fdaf809ef2a886a2077eabf3cc1ed6f4615929216c55a02133a915acf78f49c
-
SHA512
bcfbdd8b3cdb7f2557cffbfa43d0c7658faeb11ce0cead41c55fdc5c017988248400e175db090fa5d79f607145d75252b9340c7ea824d9bd58a905669472ca76
-
SSDEEP
6144:V0QzOT737vABk37vAByEWM4allFtjrAe8:VL6cB6cBySllFtIe8
Malware Config
Signatures
Files
-
7fdaf809ef2a886a2077eabf3cc1ed6f4615929216c55a02133a915acf78f49c.exe windows x86
79ab7f0be9f9d8bef4f967325dbea1c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mfc80u
ord899
ord4078
ord774
ord1472
ord280
ord283
ord2468
ord5398
ord577
ord776
ord3249
ord293
ord764
ord762
ord1155
ord1178
ord1182
msvcr80
__dllonexit
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_lock
_purecall
_wtoi
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
_invalid_parameter_noinfo
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_beginthreadex
memset
_unlock
_vsnwprintf
_vsnprintf
_onexit
_decode_pointer
?terminate@@YAXXZ
_except_handler4_common
_invoke_watson
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_wsplitpath
__argv
__argc
_recalloc
calloc
__CxxFrameHandler3
malloc
free
realloc
_controlfp_s
kernel32
FreeLibrary
LoadLibraryW
GetModuleFileNameW
ExitProcess
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
CreateFileW
GetPrivateProfileStringW
CreateMutexW
lstrlenW
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
WaitForSingleObject
CloseHandle
SetEnvironmentVariableW
GetEnvironmentVariableW
GetProcAddress
GetLastError
OutputDebugStringA
GetVersionExA
GetACP
GetThreadLocale
GetLocaleInfoA
OutputDebugStringW
user32
SendMessageW
GetMessageW
DispatchMessageW
TranslateMessage
FindWindowW
PostMessageW
wsprintfW
LoadIconW
LoadCursorW
CreateWindowExW
DefWindowProcW
PostQuitMessage
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
shlwapi
PathAppendW
PathFileExistsW
PathRemoveFileSpecW
msvcp80
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE