Static task
static1
Behavioral task
behavioral1
Sample
7f0f9881e1467b46cc6c64540c0cb843b4a9575183a0f8aab2f8b6406569d04d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7f0f9881e1467b46cc6c64540c0cb843b4a9575183a0f8aab2f8b6406569d04d.exe
Resource
win10v2004-20221111-en
General
-
Target
7f0f9881e1467b46cc6c64540c0cb843b4a9575183a0f8aab2f8b6406569d04d
-
Size
129KB
-
MD5
441fe330ed401e8202231fa6902cf402
-
SHA1
7d22b18c7d2220ff826760fbdb250c5511b0d81d
-
SHA256
7f0f9881e1467b46cc6c64540c0cb843b4a9575183a0f8aab2f8b6406569d04d
-
SHA512
a23c6e22589c5a7aa8f69707c5fc7e95f3e0c3af3e251c40ed7213194956ccd508c434db8dd50c5852fd7e0197a20d94e169987e05b244d1990f0f2f68468e5b
-
SSDEEP
3072:GrU4fCpEnvdAtBW9giSMv4t9YhEuD7E/n9p4VoiJA:GrUwkEnVAW7zCap7kn9q7
Malware Config
Signatures
Files
-
7f0f9881e1467b46cc6c64540c0cb843b4a9575183a0f8aab2f8b6406569d04d.exe windows x86
2dd7dd20eba01de202afedb180566749
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p___initenv
__p__fmode
__p__commode
__set_app_type
calloc
_adjust_fdiv
_XcptFilter
free
__setusermatherr
_except_handler3
_exit
_initterm
_controlfp
__getmainargs
kernel32
SystemTimeToFileTime
GetSystemDefaultLCID
VirtualQuery
GlobalFree
WritePrivateProfileStringA
lstrcpynA
GetProcessHeap
GetFileTime
GetCommandLineW
SetStdHandle
FileTimeToDosDateTime
IsDBCSLeadByte
VirtualProtectEx
GetDateFormatA
IsBadReadPtr
GetExitCodeProcess
DeleteFileA
SetThreadLocale
GetProcAddress
GetModuleHandleW
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 27KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 93KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE