Static task
static1
Behavioral task
behavioral1
Sample
a67b7dabf4a1e08ca0b0b94af26d3b3e3cff5527c07633966a5e4f69dbc4da37.exe
Resource
win7-20220812-en
General
-
Target
a67b7dabf4a1e08ca0b0b94af26d3b3e3cff5527c07633966a5e4f69dbc4da37
-
Size
208KB
-
MD5
0514955fb6c24f84ec481d5833fcba40
-
SHA1
a783d018f6a8de4858c9e7b1289934bf16a249f0
-
SHA256
a67b7dabf4a1e08ca0b0b94af26d3b3e3cff5527c07633966a5e4f69dbc4da37
-
SHA512
726ec1c8bc8689fed38ef65546a9d71ef52bf6699827c0630b8e6b11dbffb2794c3d12ff25cfb0715bb991561ac64878226649c698f9649b465d4c90b89f6815
-
SSDEEP
3072:PH5lKMFDqvX4A2Uda6GBjnXpUmDQXIQsk3JXnwzf5BCg/kD7toToYN3VMhMSdz6:PpYg7UdBGdn7DCxwzf5BjkHt+lMhM5
Malware Config
Signatures
Files
-
a67b7dabf4a1e08ca0b0b94af26d3b3e3cff5527c07633966a5e4f69dbc4da37.exe windows x86
4e32723cff0cbfffd81ac1210eeac33a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
lstrcatA
GetModuleFileNameA
WaitForSingleObject
CreateProcessA
GetStartupInfoA
GetPrivateProfileStringA
FreeLibrary
GetProcAddress
LoadLibraryW
GetUserDefaultLangID
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
CloseHandle
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE