Static task
static1
Behavioral task
behavioral1
Sample
f7e5520c9a0134f09bc96b99d1edd0f58a63ca0db285eab46bf7a74052e98858.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f7e5520c9a0134f09bc96b99d1edd0f58a63ca0db285eab46bf7a74052e98858.exe
Resource
win10v2004-20220901-en
General
-
Target
f7e5520c9a0134f09bc96b99d1edd0f58a63ca0db285eab46bf7a74052e98858
-
Size
383KB
-
MD5
419127366a4935d437752daa6f6856c4
-
SHA1
d2827044c01b3a30635e76a1b1a8305dd454efa9
-
SHA256
f7e5520c9a0134f09bc96b99d1edd0f58a63ca0db285eab46bf7a74052e98858
-
SHA512
e9b0ed4defd647ca2ee6865e41eb0dc50bc4c813a415d36c385ef31deaff558dfc07b8975a73cea6304d68df32561c0c755e7bef694d61e3bf74d0a25b44ae3d
-
SSDEEP
6144:630U3Ae9c9L03xZXiuWO7xXjTZchlNVpGS5zdNRXZHvcVxDpxtC5:49AsKeiuxhPZchl3bpRpHa7xtC5
Malware Config
Signatures
Files
-
f7e5520c9a0134f09bc96b99d1edd0f58a63ca0db285eab46bf7a74052e98858.exe windows x86
690318202b35f714ccc02696c93b32fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
CreateSemaphoreA
InitializeCriticalSection
FreeLibrary
VirtualFree
VirtualAlloc
VirtualQuery
GetModuleHandleA
DeleteFileA
ReadFile
CreateFileA
LocalAlloc
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceExA
GetCurrentThread
GetLastError
HeapAlloc
GetSystemInfo
HeapCreate
InterlockedDecrement
GlobalFree
WriteFile
GlobalAlloc
UnlockFile
LockFile
SetFilePointer
LoadLibraryA
SystemTimeToFileTime
GetSystemTime
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
GetStartupInfoA
DebugBreak
HeapReAlloc
HeapFree
GetProcAddress
SetThreadPriority
ExitProcess
GetCommandLineA
GetCurrentThreadId
lstrcmpiA
Sleep
CreateEventA
CreateThread
WaitForSingleObject
CloseHandle
VirtualProtect
SetEvent
user32
RegisterClassExA
LoadCursorA
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
DrawTextA
GetClientRect
BeginPaint
DefWindowProcA
LoadStringA
DialogBoxParamA
EndDialog
IsWindowVisible
UnregisterClassA
PeekMessageA
TranslateMessage
EnumDisplaySettingsA
PostThreadMessageA
CharNextA
DispatchMessageA
GetMessageA
LoadAcceleratorsA
TranslateAcceleratorA
GetDesktopWindow
DestroyWindow
LoadImageA
LoadIconA
DestroyIcon
GetDC
gdi32
CreateCompatibleBitmap
GetDIBits
GetDeviceCaps
GetObjectA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
VariantInit
VariantClear
atl
ord17
ord23
ord57
ord18
ord16
ord21
ord20
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 192KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vgs Size: 140KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vds Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE