Static task
static1
Behavioral task
behavioral1
Sample
7abfe34d53ec4a823ce5691e1b1557f51a708ed022db04013c9ac37921f8faa9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7abfe34d53ec4a823ce5691e1b1557f51a708ed022db04013c9ac37921f8faa9.exe
Resource
win10v2004-20220901-en
General
-
Target
7abfe34d53ec4a823ce5691e1b1557f51a708ed022db04013c9ac37921f8faa9
-
Size
263KB
-
MD5
0dcdef1fc16b7ddc8f354b45f84cf800
-
SHA1
77c73ad03fe5ec88089c2e150fefc100b42df7b0
-
SHA256
7abfe34d53ec4a823ce5691e1b1557f51a708ed022db04013c9ac37921f8faa9
-
SHA512
b8dceb9b1c6d8ce177c14281e0c3b41ddd030961b473cfa4434c46b28d9bfb5b053fdfb0e9cefd5aabb5bc4f7b7515800057746ffa9778c1f324257636071938
-
SSDEEP
6144:/UwlxFswuZtFOsQh0kPoNC5j8PACKTdbjlcnFnwx5RUg:t3llJ0mheFnwx5RU
Malware Config
Signatures
Files
-
7abfe34d53ec4a823ce5691e1b1557f51a708ed022db04013c9ac37921f8faa9.exe windows x86
8cd4c5e7c4a621b59bb3e9712df03652
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GlobalUnlock
GetQueuedCompletionStatus
LoadLibraryA
MapViewOfFile
user32
RealGetWindowClassA
EnumChildWindows
UnloadKeyboardLayout
DdeInitializeW
ReleaseDC
Sections
.text Size: 203KB - Virtual size: 203KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 368B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 371B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 510B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
xr1alnnS Size: - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
GifyQKEs Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ