Static task
static1
Behavioral task
behavioral1
Sample
f7ea603361599bed0b24f771da5b1b01126423d438dab2a1bfc7c7e4f6a1abec.exe
Resource
win7-20220901-en
General
-
Target
f7ea603361599bed0b24f771da5b1b01126423d438dab2a1bfc7c7e4f6a1abec
-
Size
251KB
-
MD5
002b4e3fc895582b5efed565ca1ffd2f
-
SHA1
dc4c15eea157364faa550d10696f2e9c7d475ebc
-
SHA256
f7ea603361599bed0b24f771da5b1b01126423d438dab2a1bfc7c7e4f6a1abec
-
SHA512
30f59b4d31166cd94e7d841f60fb090315aa9926d4bbf57b7f0f2383ef78d3fe6affd6240b6177963a4a124bfc502c16a5d673e79f1b5bc6fabec16eda79c3e5
-
SSDEEP
3072:WqAHdiwrVn0+uyoWthZWNwhjKf1CIIjlWmyZa1ZOWTFS4xj3u4NGIkdJ4dDmSt0:WtdY9EWNAjHZxZZOWDxje4E0e
Malware Config
Signatures
Files
-
f7ea603361599bed0b24f771da5b1b01126423d438dab2a1bfc7c7e4f6a1abec.exe windows x86
2d3523b81365e9f32479c638bd5ba214
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_SYSTEM
Imports
kernel32
WriteConsoleW
GetStringTypeW
LCMapStringW
HeapSize
ReadFile
MultiByteToWideChar
SetEndOfFile
SetFilePointer
SetStdHandle
FlushFileBuffers
GetConsoleCP
HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LoadLibraryW
FreeLibrary
SetLastError
GetStdHandle
SetConsoleMode
GetLastError
HeapCreate
GetProcessHeap
HeapAlloc
GetLogicalDrives
FindFirstFileA
CreateFileA
CloseHandle
FindNextFileA
FindClose
GetConsoleMode
HeapFree
Sleep
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateFileW
user32
SetMenuItemInfoA
GetSystemMenu
EnumChildWindows
GetDlgItem
SendMessageA
GetFocus
GetKeyboardLayout
SetMenu
IsWindowVisible
GetSysColor
MessageBoxA
EndDialog
GetMenuItemInfoA
GetMenu
GetDC
ReleaseDC
OpenClipboard
EmptyClipboard
CopyImage
SetClipboardData
CloseClipboard
DrawIconEx
EndPaint
gdi32
CreateCompatibleBitmap
GetStockObject
PatBlt
CreatePen
SelectObject
DeleteDC
Polyline
DeleteObject
CreateCompatibleDC
comdlg32
GetOpenFileNameA
ole32
CoRegisterClassObject
ws2_32
recv
imm32
ImmSetOpenStatus
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
ntdsapi
DsUnBindA
Sections
.text Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text2 Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ