Static task
static1
Behavioral task
behavioral1
Sample
7372a2fcaf4c6ceff9ae7df14a86a951ba71d645b2f169bd668bff59768b8811.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7372a2fcaf4c6ceff9ae7df14a86a951ba71d645b2f169bd668bff59768b8811.exe
Resource
win10v2004-20220901-en
General
-
Target
7372a2fcaf4c6ceff9ae7df14a86a951ba71d645b2f169bd668bff59768b8811
-
Size
117KB
-
MD5
05d9c892a31c21e2b66ac1aae87e8565
-
SHA1
974b62be2164d5dfbbc59fa4527ab6bd6d0d473c
-
SHA256
7372a2fcaf4c6ceff9ae7df14a86a951ba71d645b2f169bd668bff59768b8811
-
SHA512
a5d7fa2e1c351073e962218e873b253e187018c2b4c8b689b28f7e78bc3e07383292f7d8e123f3f95b03f97f67ddc3dcd7b0a1e9c3b3d1296abdc792c94aa451
-
SSDEEP
3072:zgA1IclLlbA5aYUwps+uTDXINC3jyGKc7q:8A1L+a0s+cDXINoIcG
Malware Config
Signatures
Files
-
7372a2fcaf4c6ceff9ae7df14a86a951ba71d645b2f169bd668bff59768b8811.exe windows x86
2266e6af7f00e56fcfaaa15d6832cd35
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
FindWindowA
SendMessageA
kernel32
HeapAlloc
GetCurrentProcess
GetVersionExA
GetCurrentThreadId
GetModuleFileNameA
SetLastError
GetLastError
GetProcAddress
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
RtlUnwind
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
FreeEnvironmentStringsA
TlsSetValue
TlsAlloc
TlsGetValue
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetStringTypeA
TerminateProcess
UnhandledExceptionFilter
IsBadCodePtr
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
SetUnhandledExceptionFilter
GetCPInfo
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetACP
GetOEMCP
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nrdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE