?Loader@@YAKKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
7d9d4753d85cd0511e6935ab1798f18cd1f4580a1a2cfce7526156034abcc80f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7d9d4753d85cd0511e6935ab1798f18cd1f4580a1a2cfce7526156034abcc80f.exe
Resource
win10v2004-20220812-en
General
-
Target
7d9d4753d85cd0511e6935ab1798f18cd1f4580a1a2cfce7526156034abcc80f
-
Size
452KB
-
MD5
23a5f1d8f9f5e71c4dc532231de21ca8
-
SHA1
42448bda868c43eedc1628fb0fec821c49c47c25
-
SHA256
7d9d4753d85cd0511e6935ab1798f18cd1f4580a1a2cfce7526156034abcc80f
-
SHA512
60cc580831769710435ca05f129cfe4c767dd40ec62047b6991cbcafbcc4e75129d5ecf49e8293f2d9380f4258ab66432ed3d09d1662571ced0ea818bf1b3121
-
SSDEEP
6144:3pBSft72P0RIqWBw8IXWZfr9rhbuANfm9+GPBkDlHMzZH4RVSondyGE:3pQfp2P9aLXWZTZhbNOoGPWDNIH4RV0
Malware Config
Signatures
Files
-
7d9d4753d85cd0511e6935ab1798f18cd1f4580a1a2cfce7526156034abcc80f.exe windows x86
8f163037aa01ff6f2d3d9b0741ffa0d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
SizeofResource
VirtualFree
WriteFile
SetEvent
SignalObjectAndWait
GetTickCount
Sleep
GetProcAddress
GetLastError
GetModuleHandleA
InterlockedExchange
FlushFileBuffers
SetStdHandle
LCMapStringW
LCMapStringA
SetFilePointer
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
RtlUnwind
GetFileType
SetHandleCount
GetEnvironmentStringsW
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
CloseHandle
user32
ShowWindow
SendMessageA
PostMessageA
GetClientRect
GetActiveWindow
EnumWindows
FindWindowA
GetFocus
EnableWindow
LoadBitmapA
winmm
mixerClose
waveInClose
joyGetDevCapsA
mmioSetBuffer
Exports
Exports
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 392KB - Virtual size: 393KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ