Ip
Static task
static1
Behavioral task
behavioral1
Sample
c7a70f55e5731b8409512c389ae486fbc03516d960362c52b16ff2528242836f.exe
Resource
win7-20220812-en
General
-
Target
c7a70f55e5731b8409512c389ae486fbc03516d960362c52b16ff2528242836f
-
Size
158KB
-
MD5
4a7903b4b9ba043e74d286b165d2ce70
-
SHA1
0f95419fbdb462bdadf9e9c12016d9a351eb5ed9
-
SHA256
c7a70f55e5731b8409512c389ae486fbc03516d960362c52b16ff2528242836f
-
SHA512
6e1bab7c93cfc3a3c48e6f2d2f6620edd9ffa090e2fa8315e7114c8771876970ece0ecd5e3c9ef887b1df0de3d5e7a0a6d081935abc69b3688660b514cbedce0
-
SSDEEP
3072:FkmvhxYFSg+o9qKT6Lkxi5zVKCiXoaf4wfy+QxuNM85mdG62xE2N0tSXV:FkUDYFSg+oTu75JEv48FQxcM85mdwJNH
Malware Config
Signatures
Files
-
c7a70f55e5731b8409512c389ae486fbc03516d960362c52b16ff2528242836f.exe windows x86
b1fcd3f64f1b163edfca5d3618b77f0e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapAlloc
GetProcessHeap
HeapFree
FreeLibrary
Sleep
FlushFileBuffers
SetStdHandle
IsBadWritePtr
HeapValidate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
HeapReAlloc
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
CloseHandle
user32
wsprintfA
Exports
Exports
Sections
.text Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ