Static task
static1
Behavioral task
behavioral1
Sample
7930491c80a250f9eddb278c2f83ebdf7b7fab0529eb7a9dcddbd57f16f77403.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7930491c80a250f9eddb278c2f83ebdf7b7fab0529eb7a9dcddbd57f16f77403.exe
Resource
win10v2004-20220812-en
General
-
Target
7930491c80a250f9eddb278c2f83ebdf7b7fab0529eb7a9dcddbd57f16f77403
-
Size
216KB
-
MD5
a4fedb725240df446bb2966cf8192941
-
SHA1
7ceb0b2d16fa6aa0c6b185d42ab717bcfbb74446
-
SHA256
7930491c80a250f9eddb278c2f83ebdf7b7fab0529eb7a9dcddbd57f16f77403
-
SHA512
c91c395443e284e788059017a342b2f8371f8da1e71a2daba7b5e2337f7f31971b4d9ef6aa2d1af6453e804546123a48e448b9e3a8518c852bd8a3ac437bc271
-
SSDEEP
3072:AHRXRazG4ZC6KJ/6nEoIOZ6FJY4QJ6Gfw3BTIopDNfx1pLwq/LG5rQr6cJVW1:AHNRazG4Z8ck/jQYGfw3BtBru041
Malware Config
Signatures
Files
-
7930491c80a250f9eddb278c2f83ebdf7b7fab0529eb7a9dcddbd57f16f77403.exe windows x86
ea1cce097562dd33aff9619c6d78440f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoCreateInstance
CLSIDFromString
CoInitialize
OleUninitialize
OleInitialize
kernel32
InterlockedExchange
ReadFile
SetEndOfFile
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
WriteConsoleW
VirtualProtect
EnumResourceNamesA
FreeLibrary
EnumResourceTypesA
EnterCriticalSection
LoadLibraryA
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
GetLastError
CloseHandle
WriteFile
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
SetFilePointer
RtlUnwind
VirtualQuery
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
SetStdHandle
FlushFileBuffers
CreateFileA
GetLocaleInfoA
GetSystemInfo
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 120KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 323KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE