Static task
static1
Behavioral task
behavioral1
Sample
820b8dec1e1f844bf9e76b10ceb6e64fb4e7747ee43b5df2eeb93725b40c1b6d.exe
Resource
win7-20220812-en
General
-
Target
820b8dec1e1f844bf9e76b10ceb6e64fb4e7747ee43b5df2eeb93725b40c1b6d
-
Size
425KB
-
MD5
3749d4553614e2dfaaf9089f31adcff0
-
SHA1
cf15cb743ade9463e34fda9ffdee52ce9af52589
-
SHA256
820b8dec1e1f844bf9e76b10ceb6e64fb4e7747ee43b5df2eeb93725b40c1b6d
-
SHA512
b772cf0826eb5a1d23d5325e97041f0eb972374922ab5174f298eefae028f59f02e61fdd06b8038dbd273a5850360d90d8df029d4e3d8343551d725cdf3f4a4b
-
SSDEEP
12288:E/sFO7W+0mVx9JMUFRcdOpVt0ZIP2KeN7mTENr:EuOK+0mPhh0yebmYr
Malware Config
Signatures
Files
-
820b8dec1e1f844bf9e76b10ceb6e64fb4e7747ee43b5df2eeb93725b40c1b6d.exe windows x86
5d129c3b6a642d0c529630f62c156352
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
SearchPathA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 152KB - Virtual size: 369KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 36KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 48KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE