Static task
static1
Behavioral task
behavioral1
Sample
f7b782dd1d5f83cff9874e88f720cdb4595fb40d43c0e0cea0249ea5d81a55d3.exe
Resource
win7-20221111-en
General
-
Target
f7b782dd1d5f83cff9874e88f720cdb4595fb40d43c0e0cea0249ea5d81a55d3
-
Size
263KB
-
MD5
19c4893bfe539e76549784598255edc0
-
SHA1
954c93f4cff3efde06d7c3a5abed4fe3bf3f8189
-
SHA256
f7b782dd1d5f83cff9874e88f720cdb4595fb40d43c0e0cea0249ea5d81a55d3
-
SHA512
daa466a77963087c2202cb2aa47cc1b45c3b1708d8f2f05c7d117124024c35276990bc83a419e2c2deac6c032e6d7d36fa49f76b2f20aca7278f006050caccf9
-
SSDEEP
6144:69GID7b3tJ8RAL/4BOvQtV0CaCYWe0+8wgugCoOkJ:947b9+RT1aCJe0+8jugV
Malware Config
Signatures
Files
-
f7b782dd1d5f83cff9874e88f720cdb4595fb40d43c0e0cea0249ea5d81a55d3.exe windows x86
dba6c8c5c2c6fd8549c16e1bffc544c3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wtsapi32
WTSFreeMemory
WTSUnRegisterSessionNotification
WTSQuerySessionInformationW
WTSEnumerateSessionsW
WTSRegisterSessionNotification
kernel32
GetACP
LocalAlloc
GetThreadLocale
GetStdHandle
HeapFree
WriteFile
GetStartupInfoA
TerminateProcess
CreateFileW
IsDebuggerPresent
GetCurrentProcess
HeapReAlloc
WideCharToMultiByte
QueryPerformanceCounter
CreateProcessA
HeapDestroy
LoadLibraryW
HeapSize
lstrlenA
MultiByteToWideChar
GetSystemTimeAsFileTime
GetCurrentProcessId
CloseHandle
LoadLibraryExW
GetCurrentThreadId
EnumResourceTypesW
HeapFree
HeapAlloc
GetLocaleInfoA
InterlockedCompareExchange
Sleep
SystemTimeToFileTime
CompareFileTime
UnhandledExceptionFilter
lstrlenW
SetUnhandledExceptionFilter
InterlockedExchange
GetProcessHeap
GetTickCount
GetSystemTime
RaiseException
GetModuleHandleA
GetEnvironmentVariableA
lstrcpynW
oleacc
LresultFromObject
AccessibleObjectFromPoint
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 202KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ