Static task
static1
Behavioral task
behavioral1
Sample
7d8768117ee332888bd7427f9d27bb0111c66d542ad7eff6bca74291b690487d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7d8768117ee332888bd7427f9d27bb0111c66d542ad7eff6bca74291b690487d.exe
Resource
win10v2004-20220812-en
General
-
Target
7d8768117ee332888bd7427f9d27bb0111c66d542ad7eff6bca74291b690487d
-
Size
2.4MB
-
MD5
5eefdb7941c8ab90ac191877cfa42f13
-
SHA1
4cb592b826cc8c4a60b277ffa0001976c709057b
-
SHA256
7d8768117ee332888bd7427f9d27bb0111c66d542ad7eff6bca74291b690487d
-
SHA512
8ff273f5c59c17e790997fe18b481938334a684b8a93df5ebcd9aa45bc3c235080e707b17bd50e56adf0baeeb7fa8d34539bc4d7c2f8991467013f6f1894eed8
-
SSDEEP
49152:z7xCbZeNk0TiX8cz7XXo3ZdqJW6PQuFSoiA7aMtu/u7BBu7yd:zynX7ngZdcdPPn3621
Malware Config
Signatures
Files
-
7d8768117ee332888bd7427f9d27bb0111c66d542ad7eff6bca74291b690487d.exe windows x86
be9436ffcc3461ceb6145c68a68d823a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetVersion
CreateThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetCursorPos
gdi32
SetBrushOrgEx
winmm
midiOutReset
winspool.drv
DocumentPropertiesA
advapi32
RegQueryValueA
shell32
Shell_NotifyIconA
ole32
OleFlushClipboard
oleaut32
SysAllocStringLen
comctl32
ord17
ws2_32
inet_ntoa
comdlg32
GetFileTitleA
Sections
.text Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
CODE Size: - Virtual size: 330KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 234KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 481KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ