Static task
static1
Behavioral task
behavioral1
Sample
7b4ed6c75292830eb050f01ae556c4c932c4ee97b3a6450c2711bb24710b77b0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7b4ed6c75292830eb050f01ae556c4c932c4ee97b3a6450c2711bb24710b77b0.exe
Resource
win10v2004-20221111-en
General
-
Target
7b4ed6c75292830eb050f01ae556c4c932c4ee97b3a6450c2711bb24710b77b0
-
Size
212KB
-
MD5
25df4728ece03a60a376cc697bf86b27
-
SHA1
6ec458e335674ccd022431b16d52c1b05a92dbf4
-
SHA256
7b4ed6c75292830eb050f01ae556c4c932c4ee97b3a6450c2711bb24710b77b0
-
SHA512
a89eb35e616fae663997d745de22def7a1dc312e1e6bde7a22adf38f7e5c13903526532f845f6c31412eae39d4285c0e47f9ccc543879a9e75a34963516d558b
-
SSDEEP
6144:yzP+YKg48LMJKP52NESBb/IC8znMPL4+wV:yLq5nJBbwC8nMT4f
Malware Config
Signatures
Files
-
7b4ed6c75292830eb050f01ae556c4c932c4ee97b3a6450c2711bb24710b77b0.exe windows x86
727288f56f18b4834523e2fa06560fac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GetProcessHeap
GetCurrentProcess
lstrlenA
QueryDosDeviceA
MultiByteToWideChar
GetTickCount
GetSystemTimeAsFileTime
FindResourceA
GetCurrentProcessId
LockResource
CloseHandle
GetLocaleInfoA
CreateFileA
HeapAlloc
lstrcmpA
GetLocalTime
GetOEMCP
SetUnhandledExceptionFilter
lstrcpyA
SystemTimeToFileTime
HeapFree
QueryPerformanceCounter
WideCharToMultiByte
GetVolumeInformationA
IsValidLocale
SetLastError
schannel
QuerySecurityPackageInfoW
MakeSignature
QueryContextAttributesA
InitializeSecurityContextW
QuerySecurityPackageInfoA
QueryContextAttributesW
scecli
SceCloseProfile
SceBrowseDatabaseTable
SceAddToNameStatusList
SceAddToObjectList
SceAppendSecurityProfileInfo
SceAnalyzeSystem
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExW
Sections
.text Size: 146KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ