Static task
static1
Behavioral task
behavioral1
Sample
42b7c1192e662ba4f445e9494b9df5b7d29c0477b159f1b66193b3f0efe5b2d0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
42b7c1192e662ba4f445e9494b9df5b7d29c0477b159f1b66193b3f0efe5b2d0.exe
Resource
win10v2004-20220812-en
General
-
Target
42b7c1192e662ba4f445e9494b9df5b7d29c0477b159f1b66193b3f0efe5b2d0
-
Size
232KB
-
MD5
62f2f65921c972766802672afdc84107
-
SHA1
7be07bfa4855e840fbe9599acbed8b63cf8278bc
-
SHA256
42b7c1192e662ba4f445e9494b9df5b7d29c0477b159f1b66193b3f0efe5b2d0
-
SHA512
4139fef36bbc10077635a41a34f102d77c391420bdaf6ed2c1ebba6b042545c80535db97e5c56c972628b7df54d45f464dceb110bedd9ac4c026285fd57a537d
-
SSDEEP
6144:XOskWkc1z9xfjkyuKj7trjVylESvIVAJ/Ax:XOsk6ZdjVyHvIV4Ax
Malware Config
Signatures
Files
-
42b7c1192e662ba4f445e9494b9df5b7d29c0477b159f1b66193b3f0efe5b2d0.exe windows x86
d0553134e317fa540ef94a7747315945
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
hpqtap08
TAPASLink
kernel32
GetFileType
GetStdHandle
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
LoadLibraryA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 192KB - Virtual size: 496KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE