Static task
static1
Behavioral task
behavioral1
Sample
e7f091a422c861cc9c48b6e2446bb42cde80157c241a9a26a7fb7c845a8d44fd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e7f091a422c861cc9c48b6e2446bb42cde80157c241a9a26a7fb7c845a8d44fd.exe
Resource
win10v2004-20221111-en
General
-
Target
e7f091a422c861cc9c48b6e2446bb42cde80157c241a9a26a7fb7c845a8d44fd
-
Size
1.5MB
-
MD5
7248195c2716bffd44dc5be1b4fcc752
-
SHA1
15180e1ed51bdf1c281484808467af6eb2361fa5
-
SHA256
e7f091a422c861cc9c48b6e2446bb42cde80157c241a9a26a7fb7c845a8d44fd
-
SHA512
0ec9b86651288087ac094a3ede535a270c3f196536656acac34363876b0c1da7cb691290abe4a6a331f84312cb993f9029dd108da7e52217a94044c217c41877
-
SSDEEP
24576:v09zEokcmy7EW8zMto184+iAHUS95ItWyaarAyZseEO0cjFh81ZvBIqXwpsGzlJx:s9zsX84+0EGtPdrxm3ofWSsGzEfk
Malware Config
Signatures
Files
-
e7f091a422c861cc9c48b6e2446bb42cde80157c241a9a26a7fb7c845a8d44fd.exe windows x86
26e81dd651dc1239135276e4c7b1d6fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileExA
DeleteFileA
Sleep
CopyFileA
GetModuleFileNameA
GetTempPathA
GetProcAddress
LoadLibraryA
GetLastError
MoveFileA
GetTempFileNameA
HeapFree
HeapAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
WriteFile
ReadFile
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
SetFilePointer
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
RtlUnwind
GetFullPathNameA
GetCurrentDirectoryA
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
SetStdHandle
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
InterlockedDecrement
InterlockedIncrement
CreateFileA
GetStringTypeA
GetStringTypeW
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ