Static task
static1
Behavioral task
behavioral1
Sample
7f5e4fcad117286fc9a04917aea47cfd4ccb2805803f4be07f913d399a6cb67b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7f5e4fcad117286fc9a04917aea47cfd4ccb2805803f4be07f913d399a6cb67b.exe
Resource
win10v2004-20220812-en
General
-
Target
7f5e4fcad117286fc9a04917aea47cfd4ccb2805803f4be07f913d399a6cb67b
-
Size
269KB
-
MD5
58976e5821ae6701f6aabbc279951cc0
-
SHA1
9878db60426f3b0de4535afc4573c612b05cfe28
-
SHA256
7f5e4fcad117286fc9a04917aea47cfd4ccb2805803f4be07f913d399a6cb67b
-
SHA512
8c76c202e2cec464e4586cffa72bb18bd47adcbd8e2e17163287f88475368cc8b06657210c2af639a2d17b64cf623a857be5542fbf4da555e1f2f122de4c51d7
-
SSDEEP
6144:7iQ4+wpCBAiKc3yu7svlVVQWx5lkinovBfBD+D3SMHZzA:7jwcBlHL7sdl5oJpASMHZc
Malware Config
Signatures
Files
-
7f5e4fcad117286fc9a04917aea47cfd4ccb2805803f4be07f913d399a6cb67b.exe windows x86
a876d77a475c3105c2a4262689f53aaa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeviceIoControl
lstrcmpiA
GetNumberFormatA
CreateNamedPipeA
GetSystemInfo
FileTimeToLocalFileTime
InterlockedExchange
GetPrivateProfileIntA
OpenFileMappingA
SetEnvironmentVariableA
GetProcAddress
FindResourceW
CreateMutexA
MoveFileW
CreateEventW
CreateHardLinkA
GetEnvironmentVariableW
SetVolumeLabelA
FormatMessageA
lstrcpynW
SetCurrentDirectoryA
GetModuleHandleA
CreateSemaphoreA
GetCurrentDirectoryA
GetProcessTimes
GetVolumePathNameW
VirtualQueryEx
QueryDosDeviceA
GetAtomNameA
nddeapi
NDdeShareEnumA
NDdeShareSetInfoA
NDdeShareDelA
NDdeShareAddA
NDdeShareGetInfoA
certcli
CACloseCA
CADeleteCA
CAEnumNextCA
CACloseCertType
CAEnumFirstCA
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 244KB - Virtual size: 243KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ