Static task
static1
Behavioral task
behavioral1
Sample
7a4e2dff7aee5b415be14e733547e34d9f8b9357433e821b171791a4e213937d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7a4e2dff7aee5b415be14e733547e34d9f8b9357433e821b171791a4e213937d.exe
Resource
win10v2004-20220812-en
General
-
Target
7a4e2dff7aee5b415be14e733547e34d9f8b9357433e821b171791a4e213937d
-
Size
437KB
-
MD5
d305c00acc4cd962dfd2ab69c3d9fbda
-
SHA1
adf57e2f7555badf5467c127e138de49a58cfb2b
-
SHA256
7a4e2dff7aee5b415be14e733547e34d9f8b9357433e821b171791a4e213937d
-
SHA512
a8eb88507e124fa66fa1cb420e69c86b45f584f8f55281d25d9daf3b33017e06effcf5ea17421b6990d48107617cc0cd2dc3eda6786128b5f68efe808d6ecc01
-
SSDEEP
6144:FCOoWSuTpRMgDtvAP+2PqdAdeF54hFNE9cZQ5XR7nyHOshfXR7nyHOsh:FyuTpRJvAP7ydAdeohxQ5ByusdByus
Malware Config
Signatures
Files
-
7a4e2dff7aee5b415be14e733547e34d9f8b9357433e821b171791a4e213937d.exe windows x86
544859dbf19bf9d05a05fe6e02b79d34
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
FindResourceA
FreeLibrary
LoadResource
WriteFile
SizeofResource
GetProcAddress
LoadLibraryA
LockResource
EnumResourceNamesA
CloseHandle
FreeResource
GetWindowsDirectoryA
OutputDebugStringA
GetTempPathA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
shell32
ShellExecuteA
SHGetSpecialFolderPathA
msvcp100
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
msvcr100
_cexit
_exit
_XcptFilter
_ismbblead
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_crt_debugger_hook
__getmainargs
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
__dllonexit
_unlock
??2@YAPAXI@Z
exit
??3@YAXPAX@Z
memmove
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
_lock
?terminate@@YAXXZ
_onexit
memcpy
_CxxThrowException
__CxxFrameHandler3
_amsg_exit
memset
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 420KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ