Static task
static1
Behavioral task
behavioral1
Sample
7cf9fc16a29a2906241640c13d802e854d2964c73cc9642e423ddf7edca37d87.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7cf9fc16a29a2906241640c13d802e854d2964c73cc9642e423ddf7edca37d87.exe
Resource
win10v2004-20220812-en
General
-
Target
7cf9fc16a29a2906241640c13d802e854d2964c73cc9642e423ddf7edca37d87
-
Size
68KB
-
MD5
0832bc00f20703069f8e0b3b1414bdd0
-
SHA1
ba45470b01352ec1bbfb68eccb035e6a48dbd32f
-
SHA256
7cf9fc16a29a2906241640c13d802e854d2964c73cc9642e423ddf7edca37d87
-
SHA512
08e1e28f1f23a4510d5bfb469fdeb688f0d9c27bc5eb35180543830e9bf686f71ca23f9658d81b54ce50acb5f9bee44698e9daba4159fa2690fd828de4d0268c
-
SSDEEP
768:jmd8Mu84p75yjI480SVzff3v6X1CBOtFhuV8Ql0X+fVQLoxaeIcyaCq/AMgerzC1:OjGT48956YOPhuV6UxRygA+zin+k
Malware Config
Signatures
Files
-
7cf9fc16a29a2906241640c13d802e854d2964c73cc9642e423ddf7edca37d87.exe windows x86
2b0efa0dea3e93a9350e6c4e1ea2e061
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
TlsAlloc
GetStartupInfoW
lstrcpynA
GetPrivateProfileIntA
lstrcpynA
GetLocaleInfoW
lstrcpynA
TlsAlloc
lstrcpynA
VirtualAlloc
DeleteFileW
GetNumberFormatA
TlsGetValue
SetCurrentDirectoryA
GetModuleHandleA
GetCurrentProcess
CreateEventA
GetFullPathNameA
lstrlenA
FindNextVolumeW
lstrcpynA
SetConsoleTitleW
vssapi
??0CVssWriter@@QAE@XZ
IsVolumeSnapshotted
??1CVssWriter@@UAE@XZ
VssFreeSnapshotProperties
Sections
.text Size: 11KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE