Static task
static1
Behavioral task
behavioral1
Sample
f7e0b30f7ad70d8587ccd79032c43c933ccc71dbf0270ed96214acbf326acc8f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f7e0b30f7ad70d8587ccd79032c43c933ccc71dbf0270ed96214acbf326acc8f.exe
Resource
win10v2004-20220812-en
General
-
Target
f7e0b30f7ad70d8587ccd79032c43c933ccc71dbf0270ed96214acbf326acc8f
-
Size
379KB
-
MD5
6734b3d6937eefa78224a2b2bc17dfa8
-
SHA1
b0fd1c724b19ae54f8e02eb2d35a32dfc4e066b2
-
SHA256
f7e0b30f7ad70d8587ccd79032c43c933ccc71dbf0270ed96214acbf326acc8f
-
SHA512
7c090e9db62efa2cf2ccb2a22166052982e7451358b77653355159b3cbb7c8b75ebe6985dfd2cf1f73572f30da4a41aba412f99dd26ed9101be980168af96b09
-
SSDEEP
6144:qStBMtmg9o+sSxxdlpieGa8dZXNn5/7bkbiHWtEWg0NrpUdj0GIwRc38xLb/:qStWO+XxxdlpAa8dTn1YO2EO+j0dw0wX
Malware Config
Signatures
Files
-
f7e0b30f7ad70d8587ccd79032c43c933ccc71dbf0270ed96214acbf326acc8f.exe windows x86
de39dc68941cc6307e3b2590c857a907
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
user32
wsprintfA
advapi32
RegCloseKey
ole32
OleRun
Sections
.text Size: 128KB - Virtual size: 242KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 68KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE