Static task
static1
Behavioral task
behavioral1
Sample
b7540ecd38eb5722ca7a75ae8e654fbc82f41e6d54991df87491ccb0f48cd70a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b7540ecd38eb5722ca7a75ae8e654fbc82f41e6d54991df87491ccb0f48cd70a.exe
Resource
win10v2004-20220812-en
General
-
Target
b7540ecd38eb5722ca7a75ae8e654fbc82f41e6d54991df87491ccb0f48cd70a
-
Size
58KB
-
MD5
7cb46cd40baa224d7e450345a5a95440
-
SHA1
6e77e80bc778cf6d7e8c37f2105ed257b7914799
-
SHA256
b7540ecd38eb5722ca7a75ae8e654fbc82f41e6d54991df87491ccb0f48cd70a
-
SHA512
3e5b9e21195618f0c85163cedcde8f5c67d375272c3661dd69f811f833eed7fa1ec9582e235d9d502964eb2b2d876a8bc52360ed8e3f85aa03f8f5c6911e98ee
-
SSDEEP
1536:zvBHqEK/4nkDC76Dm6r7QOXrQ8XYZUe3+ZXWZD:zvBHbK/4YC72eOXM0YZZA
Malware Config
Signatures
Files
-
b7540ecd38eb5722ca7a75ae8e654fbc82f41e6d54991df87491ccb0f48cd70a.exe windows x86
ffca0156243996d367513218b47ef353
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
IsValidLocale
GetProcessHeap
lstrcmpiA
OpenMutexA
GetModuleFileNameA
GetVolumePathNameW
FileTimeToLocalFileTime
HeapCreate
GetLogicalDriveStringsW
DeleteFileA
lstrcmpiA
SetLastError
WaitForMultipleObjects
CreateNamedPipeW
lstrcmpiA
GetStdHandle
lstrcmpiA
CreateMailslotA
GetDriveTypeW
lstrcmpiA
lstrlenA
Sleep
scecli
DeltaNotify
SceOpenPolicy
InitializeChangeNotify
SceSysPrep
Sections
.text Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.adata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ