Static task
static1
Behavioral task
behavioral1
Sample
07910543b937709500f0058548205cda893e5765ed9e5a266318928d25b16c09.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
07910543b937709500f0058548205cda893e5765ed9e5a266318928d25b16c09.exe
Resource
win10v2004-20220812-en
General
-
Target
07910543b937709500f0058548205cda893e5765ed9e5a266318928d25b16c09
-
Size
124KB
-
MD5
08ec2a535809e3b8d4885bdf68107e21
-
SHA1
fd2774e3d6b9272b364f7816133207b0d7c1163e
-
SHA256
07910543b937709500f0058548205cda893e5765ed9e5a266318928d25b16c09
-
SHA512
90ce7c95b6e7dbbbb072f9f859d76829416fb000aee4f72cb3eecb34227f5602b98e17f3e6c5e36498a3761034a5b9336692fd17ff70ab2d99c345470a397cca
-
SSDEEP
3072:iz6YdH8t781alA13nW07Vg+D5LIauJFjs6oqheF:AIe33W0RD5LVTq6
Malware Config
Signatures
Files
-
07910543b937709500f0058548205cda893e5765ed9e5a266318928d25b16c09.exe windows x86
edd7fda0363489a2ee41bb6d50c51fa0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msimg32
AlphaBlend
TransparentBlt
kernel32
GetProcAddress
LoadLibraryA
GetTickCount
ExitProcess
ReadFile
GetThreadSelectorEntry
GetCurrentThread
GetFileAttributesExA
GetModuleHandleA
GetLastError
GetLocalTime
VirtualAlloc
GetModuleFileNameA
HeapAlloc
GetProcessHeap
CreateFileA
GetStdHandle
HeapFree
GetCommandLineA
GetVersionExA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
HeapReAlloc
HeapDestroy
HeapCreate
WriteFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
AnyPopup
gdi32
CloseFigure
BitBlt
shell32
DragQueryPoint
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ