Static task
static1
Behavioral task
behavioral1
Sample
7c91ed5375064564203d2471c9dedb799d3771f9957e9ccbc73d96049d215a9f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7c91ed5375064564203d2471c9dedb799d3771f9957e9ccbc73d96049d215a9f.exe
Resource
win10v2004-20220901-en
General
-
Target
7c91ed5375064564203d2471c9dedb799d3771f9957e9ccbc73d96049d215a9f
-
Size
58KB
-
MD5
9f572c90b9c6776914336118d6763593
-
SHA1
3ae052b8b3e9a0c0a12de859b259c9e6257ae7c4
-
SHA256
7c91ed5375064564203d2471c9dedb799d3771f9957e9ccbc73d96049d215a9f
-
SHA512
9c3e6290103953137115049aaf1329dc4b48f2b14c35bff1d7384a3cf348b56c1a876054f5c95e428200700dfc8f4afdf5711218bf68c6d717a1283904e14652
-
SSDEEP
1536:Hn4ApSkcHMXakGCeRev49nAUc04GBgaTVsu:Hn4eShsXaBH1n7BgaTJ
Malware Config
Signatures
Files
-
7c91ed5375064564203d2471c9dedb799d3771f9957e9ccbc73d96049d215a9f.exe windows x86
a2b45497b1ce134ea68453e0fc16401a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCurrentDirectoryA
Heap32Next
DeleteFileA
SetFilePointer
DeleteFileA
HeapFree
GetModuleHandleA
CreateFileMappingW
CreateMailslotW
GetProcessHeap
GetConsoleAliasW
GetExitCodeProcess
HeapCreate
GetVersion
GetConsoleTitleA
SetEnvironmentVariableA
GetStringTypeW
WriteConsoleW
DeleteFileA
GetACP
GetShortPathNameW
GetModuleHandleW
GetStringTypeW
mstscax
DllCanUnloadNow
DllRegisterServer
DllGetTscCtlVer
DllUnregisterServer
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ