Static task
static1
Behavioral task
behavioral1
Sample
7642aa7f71e0e4d0f858b6a09ecd3003209c7845a2fc38ab33c5447adf598337.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7642aa7f71e0e4d0f858b6a09ecd3003209c7845a2fc38ab33c5447adf598337.exe
Resource
win10v2004-20220812-en
General
-
Target
7642aa7f71e0e4d0f858b6a09ecd3003209c7845a2fc38ab33c5447adf598337
-
Size
109KB
-
MD5
78f221e5974fc662aaf769bbc3767a35
-
SHA1
b382621d9d604f743384a025cadc6d442648ecbb
-
SHA256
7642aa7f71e0e4d0f858b6a09ecd3003209c7845a2fc38ab33c5447adf598337
-
SHA512
4aeb1d37758a642a7d0ad7e00ac61e1b3956cec6600ec94cbcc9b1a4e0d18c74b2130ae5dedf58207f6ba2c72471b273d620ab65ad3522096c0955926c2f618a
-
SSDEEP
1536:eh2B8EmByoxObRy0col/gDKjHkea2aHN75omYk36kmBux1hmBGJH8X:e42tByocW/ykea2C1/+Yx1hm4JH8X
Malware Config
Signatures
Files
-
7642aa7f71e0e4d0f858b6a09ecd3003209c7845a2fc38ab33c5447adf598337.exe windows x86
4ece1fabd8100e0e8742ca7a470548dd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDBCSLeadByte
GetSystemDefaultLCID
DeleteFileA
GetFileType
OpenProcess
lstrlenA
LocalFileTimeToFileTime
GetCurrentThread
GetVersionExW
GetTempPathA
GetProcAddress
LoadResource
lstrcpyA
GetEnvironmentStrings
SetThreadLocale
VirtualProtect
GetCurrentProcessId
GetStringTypeW
GetConsoleOutputCP
DeleteFileW
GetCurrentProcess
SizeofResource
GetCPInfo
GetThreadLocale
GetModuleHandleA
RtlMoveMemory
GetACP
GlobalReAlloc
msvcrt
tan
_exit
__p___initenv
__getmainargs
__set_app_type
_controlfp
_adjust_fdiv
__p__commode
_except_handler3
__p__fmode
_initterm
_XcptFilter
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Asone Y Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ