Static task
static1
Behavioral task
behavioral1
Sample
7143d947c7e830c9b189dcf1e4e141050ab75689e84748876ac12fb8984b67ad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7143d947c7e830c9b189dcf1e4e141050ab75689e84748876ac12fb8984b67ad.exe
Resource
win10v2004-20220812-en
General
-
Target
7143d947c7e830c9b189dcf1e4e141050ab75689e84748876ac12fb8984b67ad
-
Size
260KB
-
MD5
0898f208f9c99b851319788a6b830576
-
SHA1
4ba68814ca0f7265019860535ff38cf66bab749c
-
SHA256
7143d947c7e830c9b189dcf1e4e141050ab75689e84748876ac12fb8984b67ad
-
SHA512
f3aa92068a9e21c21bab17dc52ec4b630e69238157faa38b66e6d1afba72664a35e5f540e73ebb40fc304069d1d0d16344dec8ffbda0189efa3b0261e0050153
-
SSDEEP
6144:Y02og3v45Ddjwon7vmizCwjuUfwFgQn5rd:N2og3A5DdjwIvxOwSUfwv
Malware Config
Signatures
Files
-
7143d947c7e830c9b189dcf1e4e141050ab75689e84748876ac12fb8984b67ad.exe windows x86
1b1d42a5cd7d79fd739ae6a598c0b109
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnlockFileEx
HeapWalk
SetVolumeLabelW
WriteFileEx
SystemTimeToFileTime
SetCommState
FlushInstructionCache
GetFileSize
WaitNamedPipeW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
WriteFile
RtlUnwind
GetFileType
GetStdHandle
CreateIoCompletionPort
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapReAlloc
VirtualAlloc
HeapFree
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
LCMapStringW
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
LoadLibraryA
SetHandleCount
GetProcAddress
HeapAlloc
oleaut32
DispInvoke
VarEqv
VarDecFromBool
VarFormatPercent
VarCat
CreateErrorInfo
VarRound
DispCallFunc
LoadTypeLi
VarNeg
VarDateFromBool
SafeArrayDestroyData
VarDecNeg
VarDecFix
VariantChangeTypeEx
VarDecCmpR8
BstrFromVector
VarDecFromDisp
DispGetParam
SafeArrayAllocDescriptorEx
GetErrorInfo
VarBoolFromDate
VarFormatDateTime
VarMul
VarDecAdd
VarDecFromDate
CreateTypeLib2
SafeArrayUnaccessData
CreateDispTypeInfo
SafeArrayPtrOfIndex
VarNumFromParseNum
SafeArrayAllocDescriptor
SafeArrayGetIID
advapi32
RegCloseKey
RegOpenKeyA
Sections
.text Size: 226KB - Virtual size: 226KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ