Static task
static1
Behavioral task
behavioral1
Sample
800734bbcf398b473feefb61fc0a757bf01f83c7e1055063fc097f1f3e93e06a.exe
Resource
win7-20220812-en
General
-
Target
800734bbcf398b473feefb61fc0a757bf01f83c7e1055063fc097f1f3e93e06a
-
Size
184KB
-
MD5
9d24c5085948664b6646aa53668697ba
-
SHA1
f90ae6424cc532804fc1c58637b5f77781bc68ec
-
SHA256
800734bbcf398b473feefb61fc0a757bf01f83c7e1055063fc097f1f3e93e06a
-
SHA512
7a8d0429e1e93eed853a736c3961e1860227e4601c70b62b56aafbe087d6ae878eac58567985f11e8e495b268559313e9e850a4247430bdd2ac81a23c4fe3097
-
SSDEEP
3072:wSVXqlrzCAIxhUWi4SMy6yFuLmV/VhkYhaTe/TY6tMfLpWpOo:ToIUWi/MvyaqrsTKG0Oo
Malware Config
Signatures
Files
-
800734bbcf398b473feefb61fc0a757bf01f83c7e1055063fc097f1f3e93e06a.exe windows x86
d0c08ca3a1d78445d85015acd115f0a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeProcess
VirtualFree
LoadLibraryA
VirtualAlloc
VirtualProtect
GetProcAddress
GetModuleHandleA
GetFileAttributesA
GlobalFree
GetExitCodeThread
PulseEvent
Sleep
VirtualFreeEx
LocalLock
ExitProcess
GetLastError
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
HeapSize
GetTickCount
EnterCriticalSection
VirtualQuery
InterlockedExchange
RtlUnwind
GetCPInfo
GetOEMCP
GetACP
DeleteTimerQueue
GetSystemInfo
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapAlloc
HeapReAlloc
user32
PostQuitMessage
GetTopWindow
IsZoomed
GetDesktopWindow
GetDC
IsIconic
GetCursorPos
SetCursorPos
GetWindowRect
ShowWindow
gdi32
SelectObject
shell32
ShellAboutA
psapi
GetModuleInformation
msvfw32
DrawDibEnd
avifil32
AVIFileInit
shlwapi
StrStrA
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ