Static task
static1
Behavioral task
behavioral1
Sample
7c8d8f67c7b28a87115d0954f0ed44523ba2dbd1df166a2c48e7414ae8b95c31.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7c8d8f67c7b28a87115d0954f0ed44523ba2dbd1df166a2c48e7414ae8b95c31.exe
Resource
win10v2004-20220812-en
General
-
Target
7c8d8f67c7b28a87115d0954f0ed44523ba2dbd1df166a2c48e7414ae8b95c31
-
Size
379KB
-
MD5
4ffb604ff135a1e069cd3bc0532da0a9
-
SHA1
1387b82128415a320b5c29be2e349ee1cf873dd7
-
SHA256
7c8d8f67c7b28a87115d0954f0ed44523ba2dbd1df166a2c48e7414ae8b95c31
-
SHA512
ff55ae9f34654ffd715956595a8f64d848afcb9bcc9a1ad3e78218f5dd0d1b23bbc0eef8b3ba46acf1e9348d3834a42ade61d05c06b2d507664e93afa6ad2cd9
-
SSDEEP
6144:K9ZS0+z6mGJtSMQAw15eXR1kivfx1YcrN1aQkXfYd0j72+ykj:KXbXma2eh1rHx1FBsAd0/fyk
Malware Config
Signatures
Files
-
7c8d8f67c7b28a87115d0954f0ed44523ba2dbd1df166a2c48e7414ae8b95c31.exe windows x86
ef544e3e01961683beaba9fe37b89918
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
oleaut32
DispGetParam
pdh
PdhAdd009CounterA
PdhAdd009CounterW
PdhAddCounterA
PdhAddCounterW
PdhBindInputDataSourceA
PdhBindInputDataSourceW
PdhBrowseCountersA
PdhBrowseCountersHA
PdhBrowseCountersHW
PdhBrowseCountersW
PdhCalculateCounterFromRawValue
PdhCloseLog
PdhCloseQuery
PdhCollectQueryData
PdhCollectQueryDataEx
PdhComputeCounterStatistics
PdhConnectMachineA
PdhConnectMachineW
PdhCreateSQLTablesA
PdhCreateSQLTablesW
PdhEnumLogSetNamesA
PdhEnumLogSetNamesW
PdhEnumMachinesA
PdhEnumMachinesHA
PdhEnumMachinesHW
PdhEnumMachinesW
PdhEnumObjectItemsA
PdhEnumObjectItemsHA
PdhEnumObjectItemsHW
PdhEnumObjectItemsW
PdhEnumObjectsA
kernel32
GetSystemTime
GetACP
GetSystemDirectoryA
GetVersionExA
PeekConsoleInputA
EnumCalendarInfoW
CallNamedPipeW
_lread
CreateFileA
rasapi32
RasFreeEapUserIdentityW
RasGetAutodialAddressA
RasGetAutodialAddressW
RasGetAutodialEnableA
crypt32
CertDeleteCTLFromStore
CertControlStore
CertCloseStore
CertAlgIdToOID
CertDuplicateStore
CertFindAttribute
CertFindCRLInStore
CertFindCTLInStore
netapi32
DsGetDcNameW
Sections
.code Size: 1024B - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 7KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE