Static task
static1
Behavioral task
behavioral1
Sample
00a7e6fd8384a8ad8efa60785da8809299732d424dfd5a74ccfc52ea9d8dd7e0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
00a7e6fd8384a8ad8efa60785da8809299732d424dfd5a74ccfc52ea9d8dd7e0.exe
Resource
win10v2004-20220812-en
General
-
Target
00a7e6fd8384a8ad8efa60785da8809299732d424dfd5a74ccfc52ea9d8dd7e0
-
Size
303KB
-
MD5
343c424e1583ef0c5fc705028e5f21c0
-
SHA1
406549f839ec9217ffb5c4707a9e8886bdcebd14
-
SHA256
00a7e6fd8384a8ad8efa60785da8809299732d424dfd5a74ccfc52ea9d8dd7e0
-
SHA512
fc66808713d0521afb7ea443d563ccb4657e8120684e84e5be4094c9b312d690b2c15deb320dcb4052eb09ca7a4618feee2fcc456c0aabf6e38ace6c764c6a88
-
SSDEEP
6144:vEqtgMxcJUHMknMIDWUHMgmNVWSMtx2c8gdE3Z2rQDyk6x:vEqtgMGJwM6MIvjmNRMn2cRTk5W
Malware Config
Signatures
Files
-
00a7e6fd8384a8ad8efa60785da8809299732d424dfd5a74ccfc52ea9d8dd7e0.exe windows x86
0a38c81703a3d41fe4b7463e224ad84d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
WaitForSingleObject
GetDiskFreeSpaceW
CreateDirectoryA
GetPrivateProfileIntA
SetEnvironmentVariableA
GetFileAttributesA
VirtualAllocEx
WriteFileEx
GetPrivateProfileSectionA
InterlockedIncrement
Sleep
Sleep
GetLongPathNameA
ExitProcess
InterlockedDecrement
Sleep
GetDiskFreeSpaceW
lstrcpyW
FindResourceW
GetExitCodeProcess
GetPrivateProfileIntA
LoadLibraryA
apphelp
ApphelpCheckExe
SdbCreateMsiTransformFile
ApphelpCheckIME
AllowPermLayer
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rss Size: 298KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ