Static task
static1
Behavioral task
behavioral1
Sample
a7234fa07ba2d7eee69937da61a93ce10c4d0a39cf50b3b262a88057f28a224a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a7234fa07ba2d7eee69937da61a93ce10c4d0a39cf50b3b262a88057f28a224a.exe
Resource
win10v2004-20221111-en
General
-
Target
a7234fa07ba2d7eee69937da61a93ce10c4d0a39cf50b3b262a88057f28a224a
-
Size
197KB
-
MD5
30f766bd916e4cb6d28262b6575a2fa0
-
SHA1
bde5fe200ae4933588102005a9c7dac9495ee967
-
SHA256
a7234fa07ba2d7eee69937da61a93ce10c4d0a39cf50b3b262a88057f28a224a
-
SHA512
255aec4e89dcc917dc090d0353d3c36363ececcd6a48d66fda02b5c24d7284a29d77f29de03efa3e53ea8d8fa60a26bc3ffefe930f78c24c8f22de91f275f8fb
-
SSDEEP
3072:kAIt8Lv2ia2eVKk77wBd5l69sh+rOSkSn1u86sA4JEjF:krtm+iCVKk77XskoWu86s2
Malware Config
Signatures
Files
-
a7234fa07ba2d7eee69937da61a93ce10c4d0a39cf50b3b262a88057f28a224a.exe windows x86
0b445da1695a234fc4a522d4c39508c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
nnotes
ord2183
ord707
ord851
ord852
ord850
ord628
ord891
ord5738
ord392
ord3102
ord2913
ord110
ord235
ord109
ord224
ord211
ord982
ord1281
ord2176
ord210
ord858
ord1122
ord232
ord2111
ord2370
ord142
ord199
ord2364
ord1603
ord608
ord620
ord123
ord113
ord612
ord615
ord1139
ord619
ord607
ord220
ord219
ord124
ord365
ord105
ord2001
ord3587
ord610
ord611
ord2005
ord614
ord246
ord366
ord372
ord613
ord2008
ord2013
ord2011
ord2087
ord630
ord2100
ord2102
ord2086
ord2274
ord2039
ord8627
ord8726
ord201
ord2185
ord208
ord2284
ord204
ord2177
ord446
ord2015
ord5844
ord2133
ord2050
ord2848
ord2849
ord2802
ord2801
ord2018
ord2910
ord2850
ord2806
ord185
ord940
ord187
ord938
ord4461
ord2475
ord2181
ord2009
ord202
ord31
ord3771
ord708
ord2869
ord1014
ord213
ord205
ord2593
ord2116
ord2109
ord3717
ord2260
ord2283
ord5818
ord5799
ord112
ord2261
ord2262
ord2264
ord2259
ord2088
ord111
ord2062
ord4002
ord2003
ord1057
ord2002
ord2010
ord195
ord2306
ord2095
ord3725
ord32
ord20
ord408
ord2089
ord868
ord416
ord254
ord308
ord2179
ord2178
ord118
??0CTaskStatDictionary@@QAE@XZ
ord423
ord928
ord857
ord3116
ord2915
ord436
ord855
ord34
ord1570
ord1508
ord1514
ord1562
ord830
ord245
ord845
ord409
ord2096
ord2026
ord2184
ord198
ord207
ord859
ord1289
ord442
ord2180
ord230
ord4075
ord1180
ord209
ord197
ord426
ord115
?GetTaskStatData@CTaskStatDictionary@@QAGGKPAW4TaskOrStat@@PADKPAK@Z
ord114
?GetTaskStatId@CTaskStatDictionary@@QAGGPADPAK@Z
?AddNewTaskStat@CTaskStatDictionary@@QAGGPADW4TaskOrStat@@PAK@Z
?DeleteAllTaskStats@CTaskStatList@@QAGXXZ
ord222
ord150
ord487
ord335
ord149
ord146
??1CTaskStatDictionary@@QAE@XZ
ord243
ord488
ord498
ord683
ord812
ord833
ord644
ord642
ord723
?Duplicate@CTaskStatList@@QAGXAAV1@@Z
ord496
ord813
ord643
ord641
ord227
ord284
ord693
ord645
ord692
?AddTaskStat@CTaskStatList@@QAGGKH@Z
ord1459
ord2113
?GetIdAtIndex@CTaskStatList@@QAGKK@Z
?NumberOfTaskStats@CTaskStatList@@QAGKXZ
?WhatsMissing@CTaskStatList@@QAGXAAV1@0@Z
?DeleteTaskStat@CTaskStatList@@QAGGKPAK@Z
ord602
ord494
ord460
ord924
ord376
ord358
ord849
ord1042
ord853
ord896
ord2110
ord2239
ord331
ord2352
ord629
ord939
ord2847
ord893
ord2304
ord18
ord1469
ord3775
ord42
ord14
ord41
ord52
ord27
ord25
ord13
ord51
ord29
ord15
ord1061
ord193
ord8142
ord226
ord843
ord143
ord315
ord223
ord165
ord236
ord8143
ord206
ord3032
ord1062
ord1059
ord910
ord203
ord2328
ord144
ord140
ord182
ord194
ord183
??0CTaskStatList@@QAE@XZ
ord200
ord451
??1CTaskStatList@@QAE@XZ
ord462
ord2638
ord802
msvcr71
_adjust_fdiv
_controlfp
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
__CxxFrameHandler
__setusermatherr
_initterm
__getmainargs
_amsg_exit
__p___initenv
exit
_cexit
_XcptFilter
_exit
_c_exit
printf
??2@YAPAXI@Z
??3@YAXPAX@Z
kernel32
GetModuleHandleA
DebugBreak
GetVersion
GetVersionExA
user32
MessageBoxA
Sections
.text Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE