Static task
static1
Behavioral task
behavioral1
Sample
7c81405177b899aba79f30327dc7e19c0c70b57610775d01b3e7601814166673.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7c81405177b899aba79f30327dc7e19c0c70b57610775d01b3e7601814166673.exe
Resource
win10v2004-20221111-en
General
-
Target
7c81405177b899aba79f30327dc7e19c0c70b57610775d01b3e7601814166673
-
Size
813KB
-
MD5
d45e3653ec6320662f03d39637ee3a7a
-
SHA1
876194e2c8b7e82f827508b4cca9042898ff4e72
-
SHA256
7c81405177b899aba79f30327dc7e19c0c70b57610775d01b3e7601814166673
-
SHA512
20bd72f1440ca5900e5c2d66825cb66b9be91a99c845c630e2dc134466af75f59abe062a2ee7c8a75e2c614e4bfabe431b1bde822bb7bc3f319cae1ae41aac49
-
SSDEEP
12288:utmBOeSBSNlBz2i7Sd3oqPs5qUMo+AqHRYWKJf+CiZ46h03jKOwg7D829O222Ob2:nBOzBOB6mT2sNPbHy03AQ81n6rBZ
Malware Config
Signatures
Files
-
7c81405177b899aba79f30327dc7e19c0c70b57610775d01b3e7601814166673.exe windows x86
d4960a4d29bcf40c60118807400eadca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsA
FindAtomA
LoadLibraryExA
FindClose
LocalLock
GetCalendarInfoA
LocalFree
HeapCreate
TlsGetValue
GetLastError
CreateFileMappingA
LocalUnlock
GetConsoleAliasA
CreateFileA
GetModuleHandleA
IsDebuggerPresent
GetConsoleCP
WaitForSingleObject
CloseHandle
GetACP
user32
IsWindow
ScrollWindow
CascadeWindows
GetMessageA
CreateDialogParamA
GetDlgItem
SetFocus
GetIconInfo
GetDC
DefWindowProcA
PostMessageA
CallWindowProcA
DispatchMessageA
DrawIconEx
msasn1
ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncFlush
ASN1BEREncLength
ASN1BERDecEoid
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ