Static task
static1
Behavioral task
behavioral1
Sample
7228b747b9ee867ec1971f940e681cbf88759636cedb1bd93e3e3dbc1d1e3e24.exe
Resource
win7-20221111-en
General
-
Target
7228b747b9ee867ec1971f940e681cbf88759636cedb1bd93e3e3dbc1d1e3e24
-
Size
119KB
-
MD5
431d5695c470a59ac86a98ab83db7600
-
SHA1
c1a82da4c1c08e00c044007e9d9e218fe0168daf
-
SHA256
7228b747b9ee867ec1971f940e681cbf88759636cedb1bd93e3e3dbc1d1e3e24
-
SHA512
c33adf9f35158a84beebec0f99c7e718b31145f73a520dad6d355dbf68ed4ae3e34a7870e55001e6b53a53fcfe8979ee167a9fafa59817cad9217a6dbc4e89f9
-
SSDEEP
1536:jI3+LvE9+XJsyJ52graq/clIamAj7xUkEgEFH/hvo+wwXyML3TbqQePYzsWlrF5z:jI36M9qsyJDaSo4guH/MML3PqDsVhFz
Malware Config
Signatures
Files
-
7228b747b9ee867ec1971f940e681cbf88759636cedb1bd93e3e3dbc1d1e3e24.exe windows x86
eff2af6bb13f007ca6d09859e51c5658
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
lstrcpyW
GetFullPathNameA
CreateEventA
GetNumberFormatA
GetCurrentProcess
GetModuleHandleA
lstrcpyW
lstrcpyW
IsBadStringPtrW
GetLocaleInfoA
SetStdHandle
GetStartupInfoW
lstrcpyW
GetPrivateProfileIntA
GetModuleFileNameW
FindNextVolumeW
SetConsoleTitleA
lstrcpyW
SetCurrentDirectoryA
TlsAlloc
DeleteFileA
VirtualAlloc
untfs
Format
Extend
ChkdskEx
Recover
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.orpc Size: 1KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RDATA Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.EDATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ