Static task
static1
Behavioral task
behavioral1
Sample
7c5e583dcc2d3f67d6b98259080dc0ca263e4609146c59efd0eb467298666d70.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7c5e583dcc2d3f67d6b98259080dc0ca263e4609146c59efd0eb467298666d70.exe
Resource
win10v2004-20220901-en
General
-
Target
7c5e583dcc2d3f67d6b98259080dc0ca263e4609146c59efd0eb467298666d70
-
Size
113KB
-
MD5
56ce7c5a5147a3d2cde99044a169a692
-
SHA1
ce6210a71e508150050ff41153119c11121eb8ae
-
SHA256
7c5e583dcc2d3f67d6b98259080dc0ca263e4609146c59efd0eb467298666d70
-
SHA512
ef834dd3e7eab4fd033fd626fccd6d61a6d37b7206bac15623d1c922cba893ce7873bdff00e69e08f3734f811666284ddd8ade66075af150f19db56096d8c11e
-
SSDEEP
1536:lnnrsRgnQl4SKFWcFvZHnGZNN64GaSAqb8w/cb9i+a9uN/nCGsXzywIJzyfH+67Y:lnrsRFKocFBGj44/lbYC/3xyff80w
Malware Config
Signatures
Files
-
7c5e583dcc2d3f67d6b98259080dc0ca263e4609146c59efd0eb467298666d70.exe windows x86
17d45ce49c95fdd3982311bb27a7a75b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetProcessHeap
GetStdHandle
lstrcmpiA
EndUpdateResourceW
GetModuleHandleA
GetDriveTypeA
CreateWaitableTimerW
GetExitCodeProcess
lstrcmpiA
lstrcmpiA
IsValidCodePage
lstrcmpiA
FileTimeToLocalFileTime
Sleep
GetModuleFileNameA
GetLogicalDrives
GetBinaryTypeW
CreateNamedPipeA
SetLastError
SuspendThread
lstrlenA
lstrcmpiA
printui
bPrinterSetup
ConstructPrinterFriendlyName
bFolderRefresh
PnPInterface
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rts Size: 1024B - Virtual size: 650B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ