Static task
static1
Behavioral task
behavioral1
Sample
a7de5727f0ff8e72cca2cd511b5b9aa168d17937b1f25c7aa9f8e56a5d2017e3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a7de5727f0ff8e72cca2cd511b5b9aa168d17937b1f25c7aa9f8e56a5d2017e3.exe
Resource
win10v2004-20221111-en
General
-
Target
a7de5727f0ff8e72cca2cd511b5b9aa168d17937b1f25c7aa9f8e56a5d2017e3
-
Size
43KB
-
MD5
fe99fb240db630e68ee8b7b5112b5ddb
-
SHA1
7199d78e795f8afe6c63e573ef98f841bd6a4bc6
-
SHA256
a7de5727f0ff8e72cca2cd511b5b9aa168d17937b1f25c7aa9f8e56a5d2017e3
-
SHA512
03d5c36dbbeb876cb5aa35ac32c92a23057881048ce10daddc6caac1329a94838b5f541babee8ead20ae5840b23916408f7d2567abae1a1bfda67db0be88c88b
-
SSDEEP
384:eeOidmTooo5/Wme2qx0+mC6VNwUKtRQ00n52/shWWB10z:eaJi2CmHVNwk005kAAz
Malware Config
Signatures
Files
-
a7de5727f0ff8e72cca2cd511b5b9aa168d17937b1f25c7aa9f8e56a5d2017e3.exe windows x86
a1ceca143c5be4877c7a444739059f05
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
WriteFile
OpenEventW
DeleteFileA
CreateFileMappingW
GetModuleHandleA
GetTickCount
ResetEvent
CreateFileA
RemoveDirectoryA
HeapFree
lstrlenA
WriteConsoleW
GetDriveTypeA
GetFileType
FindClose
ReleaseMutex
RemoveDirectoryA
CreateDirectoryW
VirtualProtectEx
CreateMutexA
ReleaseSemaphore
SetStdHandle
Beep
FindClose
user32
DispatchMessageA
IsWindow
IsZoomed
DestroyMenu
GetClassInfoA
MessageBoxA
DrawTextW
DestroyMenu
GetWindowLongA
FindWindowA
PeekMessageA
GetSysColor
CreateIcon
dmutil
DisplayError
DisplayError
DisplayError
DisplayError
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ