Static task
static1
Behavioral task
behavioral1
Sample
f7e0be23dca48234c7b7e7c51f5f6804acde1fe35d2a7a000e4b039136974993.exe
Resource
win7-20220901-en
General
-
Target
f7e0be23dca48234c7b7e7c51f5f6804acde1fe35d2a7a000e4b039136974993
-
Size
286KB
-
MD5
ba6a7f3b7bfd7a19ce8c6681a39f8d03
-
SHA1
bed2321075691275f2ed1c1013df8d97b4f4f24d
-
SHA256
f7e0be23dca48234c7b7e7c51f5f6804acde1fe35d2a7a000e4b039136974993
-
SHA512
95f4bd9c638384500d18ae235b403204cf49206d9607e94b6b2ac3e8f57ea57d8431ac937d8a2953e118544532e87a6dd5e29f71f39c698ae708be2ed7028f8c
-
SSDEEP
6144:D8wWPQ7f8c/49sl4NTZ9doS8xcmZt/7Ef2aoEAPFdwV:gro8/hNTRN8/42SVV
Malware Config
Signatures
Files
-
f7e0be23dca48234c7b7e7c51f5f6804acde1fe35d2a7a000e4b039136974993.exe windows x86
03474c0cd880513a5d14b9cabeb520fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
shlwapi
StrRetToBSTR
SHGetValueW
PathRemoveFileSpecW
PathCombineW
PathAppendW
PathFileExistsW
kernel32
GetStartupInfoA
InterlockedCompareExchange
GlobalFindAtomA
HeapFree
GetProcAddress
InterlockedDecrement
GetCurrentDirectoryW
LocalAlloc
InterlockedIncrement
RtlUnwind
WideCharToMultiByte
InterlockedExchange
GetVersionExW
SetUnhandledExceptionFilter
GetProcessHeap
FreeLibrary
EnumResourceLanguagesW
SetCurrentDirectoryW
GetCurrentProcessId
GetTickCount
GetPrivateProfileStructW
LoadLibraryA
QueryPerformanceCounter
CreateDirectoryW
Sleep
GetCurrentThreadId
LoadLibraryExW
GetFileType
GetSystemInfo
FindClose
HeapAlloc
oleacc
CreateStdAccessibleObject
Sections
.text Size: 145KB - Virtual size: 273KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ