Static task
static1
Behavioral task
behavioral1
Sample
7a7109fbc1c67f808e7e3e40cfdc18646063e1762a5edaec94c6a03dd907c995.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7a7109fbc1c67f808e7e3e40cfdc18646063e1762a5edaec94c6a03dd907c995.exe
Resource
win10v2004-20221111-en
General
-
Target
7a7109fbc1c67f808e7e3e40cfdc18646063e1762a5edaec94c6a03dd907c995
-
Size
104KB
-
MD5
20929196f554c649d332980f24692ef7
-
SHA1
44c9f272a74794f1d1b27a7476fd79e5ec9fdc10
-
SHA256
7a7109fbc1c67f808e7e3e40cfdc18646063e1762a5edaec94c6a03dd907c995
-
SHA512
8dbc7fb467749f79a4191c8bb24950232905b4f22b8faab5b87a268cea7df307f6cd39a8011301bfcd4ed820bc2f32270f039e36a19e5b4bbdef9993229405fb
-
SSDEEP
3072:jE+HkRVn3fjKuaujqJ0geyhc4N73lTpU:zkXK6O0dyT7
Malware Config
Signatures
Files
-
7a7109fbc1c67f808e7e3e40cfdc18646063e1762a5edaec94c6a03dd907c995.exe windows x86
a7849d0af4e581e20b6e062ba6b15d73
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
GetSystemTimeAdjustment
GetConsoleCursorInfo
GetTickCount
GetPrivateProfileStringA
QueryActCtxW
GetLastError
ReadConsoleOutputCharacterW
GlobalFindAtomA
GetVolumePathNamesForVolumeNameW
lstrcatA
SetLocaleInfoW
GetEnvironmentStringsW
NlsGetCacheUpdateCount
Beep
GetSystemDirectoryA
LoadLibraryExA
GetDiskFreeSpaceExW
InitializeCriticalSectionAndSpinCount
Module32FirstW
GetComPlusPackageInstallStatus
GetProcAddress
ExpandEnvironmentStringsA
LoadLibraryA
IsBadWritePtr
EnumTimeFormatsW
GetSystemDefaultLangID
lstrcat
GlobalAddAtomA
GetNumaAvailableMemoryNode
MultiByteToWideChar
FindFirstVolumeMountPointW
PeekNamedPipe
GetProfileSectionW
GetConsoleKeyboardLayoutNameW
SetFirmwareEnvironmentVariableA
InterlockedExchange
VerifyConsoleIoHandle
EnumResourceLanguagesA
Process32NextW
SetUnhandledExceptionFilter
FileTimeToDosDateTime
CreateProcessA
GetNumaHighestNodeNumber
QueryDosDeviceA
SetFileTime
WriteProfileSectionA
GetPrivateProfileIntA
WritePrivateProfileStringA
DosDateTimeToFileTime
AllocConsole
AllocConsole
GetVolumeInformationA
SetConsoleMenuClose
FormatMessageW
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ