Static task
static1
Behavioral task
behavioral1
Sample
7991007d975ab25682667709a5d67d826169ca0a7a1afa8638a1179ebcbd74ac.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7991007d975ab25682667709a5d67d826169ca0a7a1afa8638a1179ebcbd74ac.exe
Resource
win10v2004-20220812-en
General
-
Target
7991007d975ab25682667709a5d67d826169ca0a7a1afa8638a1179ebcbd74ac
-
Size
334KB
-
MD5
0670ba9f88a2068127264723cef55e80
-
SHA1
f51b7c2df9571a3fdc65b937256ed3d134d50d82
-
SHA256
7991007d975ab25682667709a5d67d826169ca0a7a1afa8638a1179ebcbd74ac
-
SHA512
88b605965d62937503c35a300fda645824c52e020c8e0430267338448382abf8c6abb9b292374522e8a49f988ca0f48bb3056b3aed743d182a48fa9c46da7785
-
SSDEEP
6144:fJYQqLwhHrW/QUaGeCDz1Dy8yDaoSc3aIiGgo3kEaH1ne8AD36D0DdoECS:xYQqLWQaGX1+8yDaoZ3+Lo3kEaHifb
Malware Config
Signatures
Files
-
7991007d975ab25682667709a5d67d826169ca0a7a1afa8638a1179ebcbd74ac.exe windows x86
755a414ec2e464fc157ccbf84f6a977b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
msvcrt
_except_handler4_common
__set_app_type
_controlfp
?terminate@@YAXXZ
__wgetmainargs
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
ole32
CoUninitialize
CoInitializeEx
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 236KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ