Static task
static1
Behavioral task
behavioral1
Sample
7a1980d75cce1ae85dae7d3c033bb74e313f6d5a4879b14014b776a409e6195a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7a1980d75cce1ae85dae7d3c033bb74e313f6d5a4879b14014b776a409e6195a.exe
Resource
win10v2004-20220812-en
General
-
Target
7a1980d75cce1ae85dae7d3c033bb74e313f6d5a4879b14014b776a409e6195a
-
Size
208KB
-
MD5
a3af557f512df7050ef57bd422ce1345
-
SHA1
7c88c2f9575c5cc34c2d861b5691c398734a1fbf
-
SHA256
7a1980d75cce1ae85dae7d3c033bb74e313f6d5a4879b14014b776a409e6195a
-
SHA512
69ade65c33f4e27813c9723c1089439eb35772a2c4a80836f71eaa9ad536490d466fd91540927a88de02435f2693583e1f3340d2bb344596d9d6002681b12c34
-
SSDEEP
6144:ZE49Bao8PJEuXi6nR+BgnUGcSy8chVdGBit:FqRi6RtnUGcB8idJ
Malware Config
Signatures
Files
-
7a1980d75cce1ae85dae7d3c033bb74e313f6d5a4879b14014b776a409e6195a.exe windows x86
45f19ff987dd4216c359d3cc016ad4da
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
MultiByteToWideChar
FindResourceA
GetOEMCP
SetLastError
QueryPerformanceCounter
CreateFileA
SystemTimeToFileTime
GetTickCount
LoadLibraryW
WideCharToMultiByte
HeapFree
GetLocalTime
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
lstrcpyA
lstrcmpA
CloseHandle
lstrlenA
GetProcessHeap
GetLocaleInfoA
HeapAlloc
scecli
SceBrowseDatabaseTable
SceAddToNameStatusList
SceCloseProfile
SceAddToObjectList
SceAppendSecurityProfileInfo
SceAnalyzeSystem
schannel
InitializeSecurityContextW
QueryContextAttributesW
QueryContextAttributesA
QuerySecurityPackageInfoW
QuerySecurityPackageInfoA
advapi32
RegCloseKey
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExW
Sections
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.odata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdata Size: 3KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ