Static task
static1
Behavioral task
behavioral1
Sample
7b909aad5b38e5569d9a3ecf24c48d758949bbb5cda16170b8c219fce3677eba.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7b909aad5b38e5569d9a3ecf24c48d758949bbb5cda16170b8c219fce3677eba.exe
Resource
win10v2004-20220812-en
General
-
Target
7b909aad5b38e5569d9a3ecf24c48d758949bbb5cda16170b8c219fce3677eba
-
Size
132KB
-
MD5
3f1aab546a9fb771ec1eb81268d3cc90
-
SHA1
d339deb2a5c0789aaa7fe8ae7343e6c6c68d5f62
-
SHA256
7b909aad5b38e5569d9a3ecf24c48d758949bbb5cda16170b8c219fce3677eba
-
SHA512
84090dfaf4fd66f5fb3dbff3be8b49b0493cf957c0c721541459bfdb103cf6b09e1d3d5374aba30f88222d96e5c163850a1cb59b6a3d05ecd48adbad3b6624e4
-
SSDEEP
1536:NjoMKi9Ckqpto6UIO/ZdJgog+7qZPiAsYGqwkC/b8bJct9Sf4uw4rIEeo8uvx:N4ptfO/Zdul+7qeY1egtcLSf9HWo8Cx
Malware Config
Signatures
Files
-
7b909aad5b38e5569d9a3ecf24c48d758949bbb5cda16170b8c219fce3677eba.exe windows x86
4a38e8314811a600b5aba0cc705899af
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GlobalAlloc
CreateFileA
ReadFile
HeapAlloc
HeapFree
GetProcAddress
LoadLibraryA
GetProcessHeap
ExitProcess
GetSystemTimeAsFileTime
GetCommandLineA
GetVersionExA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
Sleep
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ