Static task
static1
Behavioral task
behavioral1
Sample
7db039f63301796fd05c81d6ecc5a05a80a1c7c3c9dacba37bf169d8031923e1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7db039f63301796fd05c81d6ecc5a05a80a1c7c3c9dacba37bf169d8031923e1.exe
Resource
win10v2004-20220812-en
General
-
Target
7db039f63301796fd05c81d6ecc5a05a80a1c7c3c9dacba37bf169d8031923e1
-
Size
571KB
-
MD5
7601f477888e1385f9283fda623230f0
-
SHA1
f0121933c2e18c97ed53745daf48b782dd310c9d
-
SHA256
7db039f63301796fd05c81d6ecc5a05a80a1c7c3c9dacba37bf169d8031923e1
-
SHA512
3ceb74229fd27e3ab83ca62bb32516c83e3f14d74d84d8f1c51a87fdf84e72dcef28b690e59d9292ba9e272c86a170427a964d6c83940555fc422fb35eb52741
-
SSDEEP
12288:2mRywHEZuru1aEp633TJdMaJsfwKLItLay:2CyEBWaEqEayfwKLItLa
Malware Config
Signatures
Files
-
7db039f63301796fd05c81d6ecc5a05a80a1c7c3c9dacba37bf169d8031923e1.exe windows x86
750700a19c61a64f2d010cab0c4303cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VerLanguageNameA
GetModuleHandleA
GetProcAddress
ResetEvent
GetStdHandle
SetHandleInformation
CreateSemaphoreA
GetHandleInformation
VirtualAlloc
GetLastError
GetFullPathNameA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
FlushFileBuffers
WriteFile
DeleteCriticalSection
SetFilePointer
SetHandleCount
GetFileType
ReadFile
GetCurrentDirectoryA
GetDriveTypeA
HeapFree
HeapAlloc
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
CloseHandle
CreateFileA
SetStdHandle
InterlockedDecrement
InterlockedIncrement
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
LCMapStringA
LCMapStringW
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerFindFileA
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 562KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jrsh Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dfr Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 493KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ