Static task
static1
Behavioral task
behavioral1
Sample
f7ff7076d15793e8461fada419b45a2881e16874b5c1d3dabcada7d94c460d62.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f7ff7076d15793e8461fada419b45a2881e16874b5c1d3dabcada7d94c460d62.exe
Resource
win10v2004-20220812-en
General
-
Target
f7ff7076d15793e8461fada419b45a2881e16874b5c1d3dabcada7d94c460d62
-
Size
480KB
-
MD5
0401dc6682b4a424f25330f11d421c51
-
SHA1
2b7d07ce7ad39d4e6e0e8540574008e7382bbfd1
-
SHA256
f7ff7076d15793e8461fada419b45a2881e16874b5c1d3dabcada7d94c460d62
-
SHA512
f08c7e085af7a410405d5f80f38bfe42730f192b364cd0733b978bdae9b6e19232247335603accb1404e1743114b5731d97b494b513783ef33745d1938f51b66
-
SSDEEP
12288:DyTUP8eJYTRF7lIEbEPw8IRaBJzC347QAlw/9nMlTh:DyTUP8eCzlvr8IN7Am/Yh
Malware Config
Signatures
Files
-
f7ff7076d15793e8461fada419b45a2881e16874b5c1d3dabcada7d94c460d62.exe windows x86
bba6eecffb68c417ebc190c40c6b4fe1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
SetLastError
InterlockedExchange
TerminateThread
TerminateProcess
GetProcAddress
GetTickCount
CreateProcessA
OpenEventA
VirtualAlloc
LoadLibraryExA
GetSystemDirectoryA
FlushFileBuffers
SetStdHandle
SetFilePointer
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
RtlUnwind
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
LoadLibraryA
DebugBreak
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
IsBadWritePtr
IsBadReadPtr
HeapValidate
EnterCriticalSection
LeaveCriticalSection
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
HeapAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle
user32
EnableWindow
LoadIconA
PostMessageA
ShowWindow
GetWindowTextA
DestroyWindow
FindWindowA
GetFocus
ole32
CoInitialize
CoUninitialize
ws2_32
WSAGetLastError
Sections
.rdata Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 408KB - Virtual size: 815KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ