Static task
static1
Behavioral task
behavioral1
Sample
7fa4e32b051f3177f59209d5f60906bd39495deba21bab464bba5fce6f82ead8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7fa4e32b051f3177f59209d5f60906bd39495deba21bab464bba5fce6f82ead8.exe
Resource
win10v2004-20220901-en
General
-
Target
7fa4e32b051f3177f59209d5f60906bd39495deba21bab464bba5fce6f82ead8
-
Size
872KB
-
MD5
d63b8cf6391291bd535c699b714fd691
-
SHA1
d02c3971fb880754a8f11e0374795a81f6e5e098
-
SHA256
7fa4e32b051f3177f59209d5f60906bd39495deba21bab464bba5fce6f82ead8
-
SHA512
af47a5125ffbf0915f9af7ea83e6afb3fbcfcfaaa3daeb97f0b6cec4114937d2e5633719c6cab1a5a73b10c8346ad67fad0861bab9b0d95d409a3ec9427211eb
-
SSDEEP
12288:eXpeikP4zlI0Th0nll9MFo7a1NbO1ztFZOwqIbMBmfEaQVQ3kXmppIttr:eXpea9hCuFoOO1rqIlQa3q8
Malware Config
Signatures
Files
-
7fa4e32b051f3177f59209d5f60906bd39495deba21bab464bba5fce6f82ead8.exe windows x86
b9906cd7fe8d6b626bdec0bcad492333
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathRemoveFileSpecW
kernel32
LoadLibraryA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
MessageBoxW
Sections
.text Size: - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WLC0 Size: - Virtual size: 739KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WLC1 Size: 823KB - Virtual size: 823KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ