Static task
static1
Behavioral task
behavioral1
Sample
7b8649b4b6d764634e929695bc35f89e0513981913ca4c60ac86ed6a5a62fd22.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7b8649b4b6d764634e929695bc35f89e0513981913ca4c60ac86ed6a5a62fd22.exe
Resource
win10v2004-20220901-en
General
-
Target
7b8649b4b6d764634e929695bc35f89e0513981913ca4c60ac86ed6a5a62fd22
-
Size
308KB
-
MD5
07b7c7ef958eccdfb9028403d2f934a0
-
SHA1
b39b387b94d363845ca4962482894e432e0c3774
-
SHA256
7b8649b4b6d764634e929695bc35f89e0513981913ca4c60ac86ed6a5a62fd22
-
SHA512
e7f7db228fe46a7ec91c3657271f41ff6d176cf91eb127efbe73dfd8330e3504ed81cdeea405cc5993354e9e33cc8ff704205ee17641f7c872169da2c7598e35
-
SSDEEP
6144:vpZ4X5Yy8vRIPC4u6y/O8mUEwppwamegbZrEeUGTXP:i5ZPpmOappHme0weBTXP
Malware Config
Signatures
Files
-
7b8649b4b6d764634e929695bc35f89e0513981913ca4c60ac86ed6a5a62fd22.exe windows x86
838d731656a98b2dfd05758d6d9af08c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
Sleep
GetLogicalDrives
GetDiskFreeSpaceW
lstrcpyW
Heap32First
VirtualAlloc
InterlockedDecrement
ReadFileEx
GetCurrentDirectoryA
lstrcmpA
WaitForSingleObject
GetPrivateProfileIntA
GetExitCodeProcess
GetLongPathNameA
GetStringTypeW
FindResourceW
GetDiskFreeSpaceW
GetModuleHandleW
SetEnvironmentVariableA
InterlockedIncrement
LoadLibraryA
apphelp
SdbCreateMsiTransformFile
ApphelpCheckIME
ApphelpCheckExe
AllowPermLayer
clbcatq
DllGetClassObject
ComPlusMigrate
DllGetClassObject
SetSetupSave
SetSetupSave
CheckMemoryGates
ComPlusMigrate
ComPlusMigrate
SetupOpen
SetupOpen
CheckMemoryGates
CheckMemoryGates
SetupOpen
version
VerFindFileA
Sections
.text Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE