Static task
static1
Behavioral task
behavioral1
Sample
7eaf623cbfd40af0f0b1492f6e2640515ef466b637a1bbe4eb7e0888fdad42f9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7eaf623cbfd40af0f0b1492f6e2640515ef466b637a1bbe4eb7e0888fdad42f9.exe
Resource
win10v2004-20220812-en
General
-
Target
7eaf623cbfd40af0f0b1492f6e2640515ef466b637a1bbe4eb7e0888fdad42f9
-
Size
540KB
-
MD5
87d614259771b555ac741de330b1e1f7
-
SHA1
a40e111d80bc028d72032d0501a42b23256ecaa9
-
SHA256
7eaf623cbfd40af0f0b1492f6e2640515ef466b637a1bbe4eb7e0888fdad42f9
-
SHA512
890d106eecb77622ddf97a0aafc4cb321cf80e0fafc6150d4915579fc052801dc5933e98c4d1ee19205d08ff8b13084e3415fa58a34209359499de355fd89c30
-
SSDEEP
12288:OBHyIrnvcSscfwDaAt2BsOrLrOft/73QkB6TD8lDhsXyd1e:eSivNscoDZHOr2TP6TYlDj1e
Malware Config
Signatures
Files
-
7eaf623cbfd40af0f0b1492f6e2640515ef466b637a1bbe4eb7e0888fdad42f9.exe windows x86
1ef23f06b27726add65c71149fe866bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEnvironmentVariableW
GetSystemTimeAsFileTime
SetThreadPriority
CompareStringW
TlsAlloc
GetConsoleCursorInfo
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetThreadPriority
FlushConsoleInputBuffer
GetSystemTime
QueryPerformanceCounter
SetFileAttributesA
SetHandleCount
TlsFree
CloseHandle
EnterCriticalSection
SetConsoleActiveScreenBuffer
GetCommandLineW
SetVolumeLabelW
GetProfileSectionA
GetTempFileNameW
GetEnvironmentStrings
InitializeCriticalSection
GetCurrentThread
LeaveCriticalSection
WriteFile
CompareStringA
VirtualQuery
HeapAlloc
WideCharToMultiByte
GetCurrentProcess
LoadModule
lstrlenA
SetFileAttributesW
GetLocaleInfoA
InterlockedExchangeAdd
LocalReAlloc
GetConsoleTitleW
GetCommandLineA
GetProcessHeap
FillConsoleOutputAttribute
IsValidCodePage
InterlockedIncrement
MoveFileA
GetStdHandle
GetCurrentDirectoryA
GetStringTypeA
WriteProfileSectionW
EnumResourceTypesW
SetLastError
GetVersion
GetTickCount
LoadLibraryExA
GetCPInfo
VirtualFree
GetCalendarInfoW
IsBadWritePtr
OpenMutexA
TlsGetValue
GetLogicalDriveStringsA
UnhandledExceptionFilter
HeapCreate
TlsSetValue
HeapFree
ExitProcess
GetLocalTime
GetStringTypeW
OpenFile
LCMapStringW
WritePrivateProfileStringA
GetModuleHandleA
GetFileType
GetTimeZoneInformation
SetStdHandle
HeapDestroy
GlobalCompact
InterlockedExchange
LoadLibraryA
TerminateProcess
GetLastError
ReadConsoleOutputCharacterA
ReadFile
GetProcAddress
VirtualAllocEx
RtlUnwind
GetVersionExA
ReadConsoleInputA
SetFilePointer
VirtualAlloc
GetCurrentThreadId
WriteProfileStringA
CreateMutexA
HeapReAlloc
GetStartupInfoW
SetEnvironmentVariableA
FlushFileBuffers
LocalFlags
GetStartupInfoA
DeleteCriticalSection
LCMapStringA
InterlockedDecrement
MultiByteToWideChar
lstrcmp
GetModuleFileNameA
GlobalLock
FindAtomA
EnumCalendarInfoExA
FreeEnvironmentStringsA
GetPrivateProfileSectionW
GetCurrentProcessId
SetThreadIdealProcessor
comctl32
DrawStatusText
ImageList_AddIcon
CreateStatusWindowW
ImageList_LoadImage
ImageList_GetImageRect
ImageList_Remove
ImageList_BeginDrag
ImageList_DragShowNolock
DrawStatusTextW
DrawStatusTextA
ImageList_GetIcon
InitMUILanguage
InitCommonControlsEx
ImageList_GetDragImage
ImageList_Copy
ImageList_SetIconSize
ImageList_Replace
ImageList_Read
CreateToolbarEx
ImageList_GetFlags
ImageList_GetImageInfo
ImageList_SetDragCursorImage
ImageList_SetOverlayImage
user32
DestroyWindow
FindWindowExW
SendMessageTimeoutW
InflateRect
DdeReconnect
CreateWindowExW
GetUserObjectInformationA
ShowWindow
GetDC
GetClassNameA
GetClipboardData
RegisterClassA
DefWindowProcW
DrawTextExA
MessageBoxW
OpenDesktopW
UnregisterClassA
InvalidateRgn
DeleteMenu
CreateWindowExA
GetMenu
ShowOwnedPopups
RegisterClassExA
ChildWindowFromPointEx
SetSystemCursor
Sections
.text Size: 148KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 248KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ