Static task
static1
Behavioral task
behavioral1
Sample
7670ceaa64c583b6b7675dfe02e830f3d1cf1634036bf31cd0055eee6be9a7f9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7670ceaa64c583b6b7675dfe02e830f3d1cf1634036bf31cd0055eee6be9a7f9.exe
Resource
win10v2004-20220812-en
General
-
Target
7670ceaa64c583b6b7675dfe02e830f3d1cf1634036bf31cd0055eee6be9a7f9
-
Size
23KB
-
MD5
e94c4db62c19f52d18da85d817a123e5
-
SHA1
bba8f671d99fdc517ad879033a22e8bd12b1a518
-
SHA256
7670ceaa64c583b6b7675dfe02e830f3d1cf1634036bf31cd0055eee6be9a7f9
-
SHA512
631831dc06df54467869c4efbdce6ef2c9585d0086c058e5afce0e9dfb24e7cda6e874bb698daea669036a2d06dd6c9d55a20cc600178d1b2570b719cc9ae1fe
-
SSDEEP
384:RzzeBf3/4rcApr1dhxgSDDdd5AXYBKjuh9RMO0cUuvU60wWwvXG9:cBfP4rrrngSfCS0A9RMFcfvUfnOXG9
Malware Config
Signatures
Files
-
7670ceaa64c583b6b7675dfe02e830f3d1cf1634036bf31cd0055eee6be9a7f9.exe windows x86
7a06e4c579bcfc88e37ba46017a1b873
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
auxSetVolume
msvcrt
_wsplitpath
_wcslwr
_beginthread
_except_handler3
exit
_initterm
strchr
_vsnwprintf
__CxxFrameHandler
_chdir
_beep
malloc
wcslen
_CxxThrowException
atol
query
BindIFilterFromStream
LoadIFilter
advapi32
RegEnumKeyExW
RegCloseKey
RegOpenKeyExW
RegSetValueW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
ole32
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CLSIDFromString
kernel32
GetCurrentThreadId
Sleep
FlushFileBuffers
lstrlenW
TerminateProcess
GetSystemTime
UnhandledExceptionFilter
GetLastError
InterlockedDecrement
GlobalFree
WriteFile
SetFilePointer
InterlockedIncrement
SetUnhandledExceptionFilter
VirtualAlloc
GetCurrentProcessId
DeleteFileW
CloseHandle
ReadFile
GetTempPathW
MultiByteToWideChar
SetEndOfFile
QueryPerformanceCounter
GetCurrentProcess
GetFileSize
GetSystemDefaultLCID
SystemTimeToFileTime
GetTickCount
GetModuleFileNameW
CreateFileW
GlobalAlloc
shlwapi
PathFindFileNameW
Sections
.textbss Size: - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE