Static task
static1
Behavioral task
behavioral1
Sample
7cfac143e471cde116ca374738f7489b6e93f2498ca12dbd78f0c3873a88e8a5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7cfac143e471cde116ca374738f7489b6e93f2498ca12dbd78f0c3873a88e8a5.exe
Resource
win10v2004-20220812-en
General
-
Target
7cfac143e471cde116ca374738f7489b6e93f2498ca12dbd78f0c3873a88e8a5
-
Size
102KB
-
MD5
3f720962d88d3a3ce75bf5cbc9c65d0e
-
SHA1
4af0eb03b738a940b9edef8561b5f96f8c9124a0
-
SHA256
7cfac143e471cde116ca374738f7489b6e93f2498ca12dbd78f0c3873a88e8a5
-
SHA512
586661d9678cb41db7bc017a5c4472c236afa8ddbdd28badc5b76a5a6232ccaf1b35942e165fb9749732935800fdd2e40009dffdad5bbfc11f625081901354a1
-
SSDEEP
1536:apgSaESjM+qS636jRgm+SQmRevAD66RQPlO02Fub1jdgz1g0W:mhqo7S636jmDJRvADOiFuJjB
Malware Config
Signatures
Files
-
7cfac143e471cde116ca374738f7489b6e93f2498ca12dbd78f0c3873a88e8a5.exe windows x86
325b0b2ff9f308a44bf9289469197fc3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
GetDateFormatA
GetProcAddress
GetThreadLocale
SetCurrentDirectoryA
GetEnvironmentStringsW
RtlUnwind
VirtualProtect
GetModuleFileNameW
GetTempPathA
LoadResource
SetFileAttributesW
GetModuleHandleA
SetUnhandledExceptionFilter
GetUserDefaultLCID
GetTimeZoneInformation
FreeEnvironmentStringsA
lstrcpynA
GetCurrentThread
InterlockedExchange
GetModuleHandleW
GetEnvironmentStrings
IsDebuggerPresent
GetWindowsDirectoryA
GetTickCount
DeleteFileA
SizeofResource
RtlMoveMemory
CompareFileTime
GetPrivateProfileStringA
CreateFileMappingA
GetLocaleInfoA
InterlockedDecrement
GetExitCodeProcess
msvcrt
__p___initenv
_exit
_adjust_fdiv
_except_handler3
tan
__set_app_type
__getmainargs
_controlfp
__p__commode
__p__fmode
_XcptFilter
_initterm
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Yke Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ