?_SCUESA@@YAXXZ
Static task
static1
Behavioral task
behavioral1
Sample
7c8cd061c0b6f27ef4bba982309b5c8b431d92eb4eec66b88d1a0d12bcdc2978.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7c8cd061c0b6f27ef4bba982309b5c8b431d92eb4eec66b88d1a0d12bcdc2978.exe
Resource
win10v2004-20220812-en
General
-
Target
7c8cd061c0b6f27ef4bba982309b5c8b431d92eb4eec66b88d1a0d12bcdc2978
-
Size
548KB
-
MD5
37a686aadf7bf5793c46b1c0e83f8840
-
SHA1
a9bbea897ee47f407718196502984c0b5f7a827c
-
SHA256
7c8cd061c0b6f27ef4bba982309b5c8b431d92eb4eec66b88d1a0d12bcdc2978
-
SHA512
62c2455edb1f487a48a59ade2ea5b3045f2168d62073a80a777d65267117d20dea73e83400be94885cb09deb07bb1675236d678f330508c308ad52e49c1b5442
-
SSDEEP
12288:Ifye3aEIOoRYUBDeUkx0JUj/tqz0oaL9tpnSKOJxoDM6JTs:IKeqEIOoRjeUMaUjCB4SKOoDHA
Malware Config
Signatures
Files
-
7c8cd061c0b6f27ef4bba982309b5c8b431d92eb4eec66b88d1a0d12bcdc2978.exe windows x86
32c5e7ed4b09468db3f2a8f8b619bf36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
GetLastError
VirtualFree
RemoveDirectoryA
TerminateThread
GetTickCount
LoadLibraryA
PulseEvent
SetStdHandle
GetProcAddress
Sleep
CloseHandle
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
IsBadWritePtr
IsBadReadPtr
HeapValidate
EnterCriticalSection
LeaveCriticalSection
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
RtlUnwind
TerminateProcess
GetCurrentProcess
ExitProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
HeapFree
HeapAlloc
HeapReAlloc
VirtualAlloc
MultiByteToWideChar
VirtualProtect
GetSystemInfo
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
LCMapStringA
LCMapStringW
FlushFileBuffers
SetFilePointer
ReadFile
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
user32
GetFocus
SetFocus
ReleaseDC
MessageBoxA
avifil32
AVIMakeFileFromStreams
winscard
SCardCancel
SCardConnectA
Exports
Exports
Sections
.vcode Size: 4KB - Virtual size: 421B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.fdata Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 416KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ