Static task
static1
Behavioral task
behavioral1
Sample
79f8227ef97a608fcc07bdc0e1221055b413e0e8d47fb42466592c068bb06436.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
79f8227ef97a608fcc07bdc0e1221055b413e0e8d47fb42466592c068bb06436.exe
Resource
win10v2004-20220901-en
General
-
Target
79f8227ef97a608fcc07bdc0e1221055b413e0e8d47fb42466592c068bb06436
-
Size
194KB
-
MD5
319b7157cd4aa00b3992991740342490
-
SHA1
ed7ea02cd7300bc61d567f58975b95c7254432f3
-
SHA256
79f8227ef97a608fcc07bdc0e1221055b413e0e8d47fb42466592c068bb06436
-
SHA512
1b78685d26747e5333be82b96bc344e812c930163531be7daf8c5f475cd0753a949c1fa737b1ca82c703c66473f8035591a12a8b55ebd55b9f04ffee9a6c82ec
-
SSDEEP
3072:LplsJ6Ip+CKyjT/nZF8eG5bBbvxdNPWzlGrfrVQ:Vlsr/Kavb8ew3ddVrp
Malware Config
Signatures
Files
-
79f8227ef97a608fcc07bdc0e1221055b413e0e8d47fb42466592c068bb06436.exe windows x86
2ce758be07e88595d2aaed86aaa4ef47
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommProperties
GetCommandLineA
GetCurrentProcess
GetEnvironmentStringsW
GetLastError
GetModuleHandleA
GetProcAddress
GetStringTypeA
GetStringTypeW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
FreeLibrary
MultiByteToWideChar
RtlUnwind
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteFile
_lread
lstrcpyA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LoadLibraryA
ExitProcess
shell32
SHOpenFolderAndSelectItems
SHCreateProcessAsUserW
SHSetUnreadMailCountW
gdi32
ChoosePixelFormat
CombineTransform
Arc
Sections
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ