Static task
static1
Behavioral task
behavioral1
Sample
7e9133537cee1206fc2e00aa9c7e369ce39666070074e392e3a9ec758fba0a92.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7e9133537cee1206fc2e00aa9c7e369ce39666070074e392e3a9ec758fba0a92.exe
Resource
win10v2004-20221111-en
General
-
Target
7e9133537cee1206fc2e00aa9c7e369ce39666070074e392e3a9ec758fba0a92
-
Size
122KB
-
MD5
a540753cc4d39923f7df64f9a8c63c11
-
SHA1
c1e12e609f0546ab2ba2f32ab28e038e73c5c4f2
-
SHA256
7e9133537cee1206fc2e00aa9c7e369ce39666070074e392e3a9ec758fba0a92
-
SHA512
ff336e9b559daee5bd3b1f7fa7e62e21e18409d02d3beed5db82b5fb1c5931f29a64bdbb37abdbcaa20039bf1ba1e54fd9b26497784fb858b5ab37d33e313665
-
SSDEEP
3072:rb/QvqGIx+BjfRkiU4KgrXBwsAkq/BlCyr/0MT2O:rLQvqGI5iU4KUBwsAkQr/0w2O
Malware Config
Signatures
Files
-
7e9133537cee1206fc2e00aa9c7e369ce39666070074e392e3a9ec758fba0a92.exe windows x86
f4a2b841710b20dc1455294b698a2562
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
GetFileSize
CreateFileA
GetModuleFileNameA
ExitProcess
Sleep
VirtualAlloc
GetModuleHandleA
lstrlenA
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
CloseHandle
RtlUnwind
RaiseException
GetCommandLineA
GetStartupInfoA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
HeapReAlloc
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
gdi32
SaveDC
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ