Static task
static1
Behavioral task
behavioral1
Sample
7e0fc7ec53ab01cdc6316e544fc1aaf129489790a1a9493350d22b5d6827eac4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7e0fc7ec53ab01cdc6316e544fc1aaf129489790a1a9493350d22b5d6827eac4.exe
Resource
win10v2004-20220812-en
General
-
Target
7e0fc7ec53ab01cdc6316e544fc1aaf129489790a1a9493350d22b5d6827eac4
-
Size
768KB
-
MD5
1162f722f2b987fffa8b970f474ababd
-
SHA1
7104b556a7d8295cebcebada494e9db268d0745a
-
SHA256
7e0fc7ec53ab01cdc6316e544fc1aaf129489790a1a9493350d22b5d6827eac4
-
SHA512
e9f00afe74b6ceebbb881181e00c651c54e4cb2f69cca7ba64bb40a7b724aae6a5c535d4450215e9fbd81db8946c8b0d6a4ca04c862488ce8a8bb2b9772457c9
-
SSDEEP
24576:dlkUOCgUJYUVX6Bk0hcPUwdY2Jv2cdThRXYM:dfOCgUJTVXGkOMY2Jv2cpHXH
Malware Config
Signatures
Files
-
7e0fc7ec53ab01cdc6316e544fc1aaf129489790a1a9493350d22b5d6827eac4.exe windows x86
9ec7bdbba5c537df3edfaad56f56aa9c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
Sleep
SetLastError
VirtualProtectEx
GetProcessHeap
DeleteFileW
GlobalFree
CreateHardLinkW
GetFileAttributesA
SetLastError
ReadConsoleW
SetEvent
CloseHandle
CreateSemaphoreA
HeapSize
lstrlenA
CreateDirectoryW
GetTickCount
LoadLibraryA
GetLocalTime
CreateMutexA
rsaenh
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
traffic
TcDeleteFilter
TcDeleteFlow
TcAddFlow
TcAddFilter
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE