Static task
static1
Behavioral task
behavioral1
Sample
7a6666df7b616b5e84694107747ea5edc48b013c280e351ae7dd8f20b2b58129.exe
Resource
win7-20221111-en
General
-
Target
7a6666df7b616b5e84694107747ea5edc48b013c280e351ae7dd8f20b2b58129
-
Size
199KB
-
MD5
14d1843ecce84a4b15a6a85b2aa620f0
-
SHA1
5e9f96f9118f22edab60eb5b67e34403559870a6
-
SHA256
7a6666df7b616b5e84694107747ea5edc48b013c280e351ae7dd8f20b2b58129
-
SHA512
450f81b4c9a04a177ac63968447a8bf3ba37ec124c8eb993dbc14df259583d7e59d5997effb36022f056dab88613ef1575fa6bbe976df68d3a684c299060fb60
-
SSDEEP
3072:XVo9Lrg+57ISz2FJu4mC9BESTnIMn+ajXWT5IEIEDtr2SlbKH5pya:lo9LLW09SX+uXWTNDtyS1ivr
Malware Config
Signatures
Files
-
7a6666df7b616b5e84694107747ea5edc48b013c280e351ae7dd8f20b2b58129.exe windows x86
023353eca5f1b57e86427a2ee77b1edf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
TerminateProcess
MultiByteToWideChar
FreeEnvironmentStringsA
LoadLibraryA
GetProcAddress
VirtualAlloc
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapAlloc
HeapFree
WriteFile
RtlUnwind
VirtualFree
HeapCreate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DeleteFileA
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
HeapDestroy
GetCPInfo
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
user32
DispatchMessageA
TranslateMessage
GetMessageA
PostMessageA
ShowWindow
CreateWindowExA
MessageBoxA
ExitWindowsEx
DefWindowProcA
DestroyWindow
PostQuitMessage
RegisterClassExA
LoadIconA
LoadCursorA
advapi32
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xmhdcmj Size: 72KB - Virtual size: 72KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE