Static task
static1
Behavioral task
behavioral1
Sample
b7c69b5cb3e168d4d1ddc444fb18d31dc10cd25167b80fb95d74007e173b953a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b7c69b5cb3e168d4d1ddc444fb18d31dc10cd25167b80fb95d74007e173b953a.exe
Resource
win10v2004-20221111-en
General
-
Target
b7c69b5cb3e168d4d1ddc444fb18d31dc10cd25167b80fb95d74007e173b953a
-
Size
368KB
-
MD5
7f26657fe93b8e68ac523898b0bce83c
-
SHA1
e2f0f22e5034254c7bd673107eabe1ac9805cb1a
-
SHA256
b7c69b5cb3e168d4d1ddc444fb18d31dc10cd25167b80fb95d74007e173b953a
-
SHA512
4fa3b97f4747e9f8ac9ecd9cad5dfb556f2533286eab9030d5b92c7f82cff94b4af02ca6a12c522596f828c6807eb0cf4524b8b56432f916cc80cbce0a7cdf50
-
SSDEEP
6144:uedRK7KlgwYn0T+aUZYw+O/r3gtDlz1C7nucYcfLhVswEnCaKj/qTfmn/1CIay:uenK7DF0Tpw1zws7nu1cf3ed8sundCIa
Malware Config
Signatures
Files
-
b7c69b5cb3e168d4d1ddc444fb18d31dc10cd25167b80fb95d74007e173b953a.exe windows x86
8721f93c30255b29d1c7a6535afe3b0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SuspendThread
SetComputerNameA
GetSystemTime
VirtualAlloc
GetModuleHandleA
Sleep
LoadLibraryA
GlobalFree
LocalAlloc
GetTickCount
GlobalAlloc
CreateThread
FreeResource
SizeofResource
GlobalReAlloc
LoadResource
FindResourceExA
VirtualProtect
GetProcAddress
VirtualQuery
SetLastError
CloseHandle
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
GetLastError
VirtualFree
CreateFileA
CopyFileExA
LocalFree
LockResource
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
GetStringTypeW
user32
wsprintfA
IsWindowVisible
LoadIconA
MessageBoxA
GetDesktopWindow
gdi32
CreateBitmapIndirect
advapi32
RegOpenKeyExA
RegCloseKey
RegFlushKey
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 312KB - Virtual size: 721KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ