Static task
static1
Behavioral task
behavioral1
Sample
7fbc8a91c6b16bb5ad89cfd65f19fa89ff9122ed81f06d5ca4b9e731389cd4e2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7fbc8a91c6b16bb5ad89cfd65f19fa89ff9122ed81f06d5ca4b9e731389cd4e2.exe
Resource
win10v2004-20221111-en
General
-
Target
7fbc8a91c6b16bb5ad89cfd65f19fa89ff9122ed81f06d5ca4b9e731389cd4e2
-
Size
28KB
-
MD5
c1f6f81fe33f4ef0cf8debf666917a08
-
SHA1
14624d460942f2bf31aa3ccea1ddc8ba5eedb283
-
SHA256
7fbc8a91c6b16bb5ad89cfd65f19fa89ff9122ed81f06d5ca4b9e731389cd4e2
-
SHA512
46d988f7af1a7ea5e67d40455d4b4dae34589e04eb77c109b4d172052984c3706e26f98c44371ababb68f976e8e39dac550a805245be7078f910808f0ea5114c
-
SSDEEP
384:AW4Z49aC+jPtCcaBodb8EpNoJ0STUwu+Rz69Tj6K:AdZ4ULjFYBW86NWTUYR8Tj6K
Malware Config
Signatures
Files
-
7fbc8a91c6b16bb5ad89cfd65f19fa89ff9122ed81f06d5ca4b9e731389cd4e2.exe windows x86
90b9a730372e0746d0c3a3252eb8d820
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileAttributesA
GetModuleFileNameA
CloseHandle
ReleaseMutex
GetLastError
TerminateProcess
WaitForSingleObject
CreateThread
GetSystemDefaultUILanguage
RaiseException
InterlockedExchange
CreateProcessA
LoadLibraryA
GetProcAddress
Sleep
ExitThread
GetSystemDirectoryA
lstrcatA
lstrcpyA
OpenMutexA
GetTickCount
LocalAlloc
FreeLibrary
GetStartupInfoA
GetModuleHandleA
user32
wsprintfA
advapi32
OpenServiceA
DeleteService
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
shell32
SHGetSpecialFolderPathA
msvcrt
malloc
_CxxThrowException
_except_handler3
??3@YAXPAX@Z
strrchr
??2@YAPAXI@Z
exit
atoi
strncpy
strcspn
strstr
localtime
time
free
??1type_info@@UAE@XZ
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
rand
sprintf
__CxxFrameHandler
iphlpapi
GetIfTable
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ