Static task
static1
Behavioral task
behavioral1
Sample
786cc6083943292af46daa8114a32e09be717e2f3a3b48d901da009de75f1080.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
786cc6083943292af46daa8114a32e09be717e2f3a3b48d901da009de75f1080.exe
Resource
win10v2004-20220812-en
General
-
Target
786cc6083943292af46daa8114a32e09be717e2f3a3b48d901da009de75f1080
-
Size
3.7MB
-
MD5
1322fbc7233ace80714cf2cb3237c18d
-
SHA1
d5aa5ed7f0875c5b1d8a5d5aeae0cb3fbf8761ca
-
SHA256
786cc6083943292af46daa8114a32e09be717e2f3a3b48d901da009de75f1080
-
SHA512
fb77f9ac07881740a7c4a713b98f58a6052d24128f76ec1024f899b11d677dd797d91d6b7aed161534cf5aec63689bef32a03893c76ac002d29fb430c710e08c
-
SSDEEP
98304:qc9PBLug6SvXc3cCimdhqnkpdRDdmV3SJ:qcnLSMX6imdhqnKw3SJ
Malware Config
Signatures
Files
-
786cc6083943292af46daa8114a32e09be717e2f3a3b48d901da009de75f1080.exe windows x86
e7a35ec048400fa3ec6ead8b3fc846c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SleepEx
LoadLibraryA
GetProcAddress
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEndOfFile
GetOEMCP
GetACP
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetLastError
CloseHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ReadFile
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
WriteFile
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetStringTypeW
user32
GetMessageA
DispatchMessageA
GetDesktopWindow
Sections
.text Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BHXFR2 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WSGVWNS Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UHXFVR Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
OPG Size: 384KB - Virtual size: 381KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ