Static task
static1
Behavioral task
behavioral1
Sample
7896a237a5becf4c7d4946da348ea67d0409490c2f404b546888c2a5bb41ef16.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7896a237a5becf4c7d4946da348ea67d0409490c2f404b546888c2a5bb41ef16.exe
Resource
win10v2004-20220812-en
General
-
Target
7896a237a5becf4c7d4946da348ea67d0409490c2f404b546888c2a5bb41ef16
-
Size
767KB
-
MD5
1a5429ecd366707df80320c62016c7e2
-
SHA1
2be9614ed35d56b0a6b56f90ee003f028dbf2ab4
-
SHA256
7896a237a5becf4c7d4946da348ea67d0409490c2f404b546888c2a5bb41ef16
-
SHA512
bdebd55958dd0408627cab529f8c704b97b2341440869fe649393b29c33bd002898ba88e7d57c32b216185b3ba1e6e915530e6fe3ccb7d99ecf23e70d571bad1
-
SSDEEP
12288:L0otHx+OoW5Z1QQSfnwY7q7pS7SpiDuznrQMftmiB+bBwyuOOV0fueLAbIW+V:L0uR+BU1QQSfOpvpiDuzrJtmiBwyefuU
Malware Config
Signatures
Files
-
7896a237a5becf4c7d4946da348ea67d0409490c2f404b546888c2a5bb41ef16.exe windows x86
826eea0216033dc980b091b85c26c8b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
SetLastError
CreateFileA
LoadLibraryA
GetFileSize
GetProcessHeap
CreateDirectoryW
GetTickCount
MapViewOfFile
GetStartupInfoA
HeapDestroy
FatalExit
VirtualProtect
SetLastError
CreateHardLinkA
HeapSize
CreateSemaphoreA
CancelIo
GetDriveTypeA
GetFileAttributesA
CreateMutexW
OpenSemaphoreA
ReadConsoleA
GetStdHandle
DeleteFileW
dsprop
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
rtutils
LogEventA
LogErrorW
LogErrorA
LogEventW
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE