Static task
static1
Behavioral task
behavioral1
Sample
42c7889cca9d1ce3208bd8ced672125c877a3d64c0a813b0425023ab8c1b37de.exe
Resource
win7-20220812-en
General
-
Target
42c7889cca9d1ce3208bd8ced672125c877a3d64c0a813b0425023ab8c1b37de
-
Size
45KB
-
MD5
4b68c7b4f292b68f40b9839d20404be6
-
SHA1
0af5bdae462fd9edef9b4460b4f3491766b3f7ab
-
SHA256
42c7889cca9d1ce3208bd8ced672125c877a3d64c0a813b0425023ab8c1b37de
-
SHA512
b7c6ffb1b40fb38774a020f46d3790d860c7da01b30f965b1c449167c1bcb986df0b8f5d90c30f2c439921cde016e956e3ec057687b30be54ba0029afe063859
-
SSDEEP
768:9tFZxZRHodWtLAvxNQFFmGeghhej1qgYYyN7wqxWha5Wscci:BodW6xNQFFtvXsYLMvvs
Malware Config
Signatures
Files
-
42c7889cca9d1ce3208bd8ced672125c877a3d64c0a813b0425023ab8c1b37de.exe windows x86
6e12742aa754448f3bfd88a8f5fa6427
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetWindowsDirectoryA
WriteFile
Sleep
SizeofResource
ReadFile
GetSystemDirectoryA
GetProcAddress
VirtualAlloc
GetCurrentProcess
LoadLibraryA
LockResource
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
WinExec
CloseHandle
GetTempPathA
WriteProcessMemory
LoadResource
SetFilePointer
FindResourceA
CreateFileA
CopyFileA
ExitProcess
user32
wsprintfA
Sections
.text Size: 512B - Virtual size: 66B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.www Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cyc Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 446B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ