Static task
static1
Behavioral task
behavioral1
Sample
7feaced2d7f47a3d8ece5c578aebb0fd24605f9db58354fe790a2a41b3619f1f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7feaced2d7f47a3d8ece5c578aebb0fd24605f9db58354fe790a2a41b3619f1f.exe
Resource
win10v2004-20220812-en
General
-
Target
7feaced2d7f47a3d8ece5c578aebb0fd24605f9db58354fe790a2a41b3619f1f
-
Size
305KB
-
MD5
719091fd4e5b210d80f83528cbe1a4bf
-
SHA1
18af72d00ec5eb68462a985f8e6541ecc929830f
-
SHA256
7feaced2d7f47a3d8ece5c578aebb0fd24605f9db58354fe790a2a41b3619f1f
-
SHA512
5db88ad2240f751e231aa791bc1c256c8c262271d29b50f659099d908d4b3235fb41874bcc06a16d179d1adda3ac0fbd28b6ace6e5531cebc1f7836d9ae975d8
-
SSDEEP
6144:OC+IhFwMaUf99SUszX9gF2oCwG0X1NpSYZwH7tlCbXUTqA1y4gCB:O7s7Nf99SFzuF2ohX1NpQcXOq/T
Malware Config
Signatures
Files
-
7feaced2d7f47a3d8ece5c578aebb0fd24605f9db58354fe790a2a41b3619f1f.exe windows x86
27d07d947d9483dc2ad464bae41ba94c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
lstrcpyW
GetVolumePathNameW
lstrcpyW
GetModuleHandleA
CreateEventA
SetLastError
lstrcpyW
SetCurrentDirectoryA
lstrcpyW
IsBadStringPtrA
GetStdHandle
lstrcpyW
GetModuleFileNameA
GetProcessHeap
IsValidLocale
GetLocaleInfoA
SetConsoleTitleA
GetStartupInfoW
DeleteFileA
VirtualAllocEx
FindFirstVolumeA
FindNextVolumeA
untfs
Format
Recover
ChkdskEx
Extend
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 294KB - Virtual size: 293KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Adata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ