Static task
static1
Behavioral task
behavioral1
Sample
7fc508703a4228b74dface542716db089de1665a5a1b1c307c197317ffc0bafa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7fc508703a4228b74dface542716db089de1665a5a1b1c307c197317ffc0bafa.exe
Resource
win10v2004-20220812-en
General
-
Target
7fc508703a4228b74dface542716db089de1665a5a1b1c307c197317ffc0bafa
-
Size
121KB
-
MD5
92feba19c3500c8abf5ce7513fad5450
-
SHA1
5ccbe494de318b9e5e25c9559af9f93074fec919
-
SHA256
7fc508703a4228b74dface542716db089de1665a5a1b1c307c197317ffc0bafa
-
SHA512
e7acff9d3b67da0c392555c27fbea62ea5515ee714f5f602eb03b309a4b6b1d9e55668b8001f7e8403a7bd63a2d551919a4cbd1b6560f14ef0beee1d5dd2093e
-
SSDEEP
3072:M+eHU8vsZE7KgflFAssXNNM323h6ckeIIhNLhJ:VIsgz3AhNW
Malware Config
Signatures
Files
-
7fc508703a4228b74dface542716db089de1665a5a1b1c307c197317ffc0bafa.exe windows x86
f9407268517d2310045cae3f824d2830
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
StretchDIBits
DeleteObject
GetCurrentObject
CreateSolidBrush
GetObjectW
SetDIBColorTable
GetNearestPaletteIndex
SetStretchBltMode
SelectPalette
SetMapMode
PatBlt
SelectObject
GetNearestColor
SetDIBits
SetDIBitsToDevice
kernel32
SetUnhandledExceptionFilter
TerminateProcess
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
GetCurrentProcess
VirtualAlloc
GetLastError
UnhandledExceptionFilter
InterlockedDecrement
GetTickCount
lstrlenA
GetCurrentThreadId
InterlockedIncrement
Sleep
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentProcessId
GlobalDeleteAtom
dhcpcsvc
McastEnumerateScopes
msvcrt
realloc
_except_handler3
_snprintf
free
__CxxFrameHandler
fprintf
_iob
exit
_adjust_fdiv
getenv
_purecall
longjmp
_initterm
sscanf
_setjmp3
malloc
ole32
ReleaseStgMedium
ntdll
NtCreateFile
user32
UnionRect
Sections
.textbss Size: - Virtual size: 656KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 452B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 748B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE