Static task
static1
Behavioral task
behavioral1
Sample
a7783f39fa3061acce2870153e3024a4b08fc0e42ac08af99ecef70f1417ad19.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a7783f39fa3061acce2870153e3024a4b08fc0e42ac08af99ecef70f1417ad19.exe
Resource
win10v2004-20220812-en
General
-
Target
a7783f39fa3061acce2870153e3024a4b08fc0e42ac08af99ecef70f1417ad19
-
Size
160KB
-
MD5
81b33a0bac0185f5c8fe5c48f63fa6c8
-
SHA1
99ef545f7c0b4b864a4e55960d3ab110823df1a1
-
SHA256
a7783f39fa3061acce2870153e3024a4b08fc0e42ac08af99ecef70f1417ad19
-
SHA512
d871bffebbceeb9cbe18d150258f1c3179281444f7f929189de0210e92db7b70c701b0ca4c4e50060aa309411e860960db990b6aa985c3594a0f726632ee1b43
-
SSDEEP
3072:SFSYtBkK8PcLHnDCqN/QjSsbl8qaONBmbDycr5gGDSyqZ3B3uS9aIYK36N9zdtlO:+k1P0HnAHzo0naGJ
Malware Config
Signatures
Files
-
a7783f39fa3061acce2870153e3024a4b08fc0e42ac08af99ecef70f1417ad19.exe windows x86
1ee367ff0410c373462b72592a1ba797
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
DebugBreak
GetEnvironmentVariableW
GetVersionExW
ExitProcess
SetConsoleCtrlHandler
CreateFileW
GetModuleFileNameW
WriteFile
FlushFileBuffers
GetLocalTime
CloseHandle
LocalFree
FormatMessageW
GetFileAttributesW
GetComputerNameW
Sleep
GetACP
HeapSize
SetStdHandle
GetStringTypeW
GetStringTypeA
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
SetFilePointer
InterlockedExchange
GetCPInfo
GetLocaleInfoA
IsBadWritePtr
HeapReAlloc
VirtualFree
HeapCreate
HeapDestroy
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
ReadFile
GetCurrentProcess
TerminateProcess
GetProcAddress
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
SetUnhandledExceptionFilter
RtlUnwind
RaiseException
GetModuleHandleA
GetVersionExA
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetOEMCP
user32
LoadStringW
odbc32
ord140
ord153
ord136
ord139
ord132
ord75
ord108
ord127
ord4
ord43
ord13
ord18
ord20
ord61
ord5
ord111
ord12
ord119
ord31
ord9
ord150
ord141
ord24
odbcbcp
ord19
ord9
ord18
ord12
ord8
ord4
Sections
.text Size: 76KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ