Static task
static1
Behavioral task
behavioral1
Sample
7ebff14a5ee9bf197521459222ca8660484d8980ff65df1aaf6692ef187c386d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7ebff14a5ee9bf197521459222ca8660484d8980ff65df1aaf6692ef187c386d.exe
Resource
win10v2004-20220812-en
General
-
Target
7ebff14a5ee9bf197521459222ca8660484d8980ff65df1aaf6692ef187c386d
-
Size
298KB
-
MD5
7d7f52b1a64a1591175998a4ac1af7e2
-
SHA1
6a058ec03ba67b3246fb6f4c2383769dc16580cb
-
SHA256
7ebff14a5ee9bf197521459222ca8660484d8980ff65df1aaf6692ef187c386d
-
SHA512
5319144394b9c748549b3b9dede7eb734ddbf2e87fced404f074cef736fee06ed8081a77cb118c60e2dc936f8756c8466366d16a5fa65c585388b15a868b5d56
-
SSDEEP
6144:MoVPodMNuCWJyB3dltPmNQjzD7NO7/CAfJUVNL4CqZrMom32zg:MoxgMNuCWQ3dWNQHD8OA6UC132
Malware Config
Signatures
Files
-
7ebff14a5ee9bf197521459222ca8660484d8980ff65df1aaf6692ef187c386d.exe windows x86
9d3587d2408e19a1323b300af77dcc36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateWaitableTimerW
lstrcatW
lstrcmpiA
IsValidCodePage
GetTickCount
CreateNamedPipeA
lstrcmpiA
GetBinaryTypeA
GetPrivateProfileStringA
SetLastError
EndUpdateResourceA
lstrcmpiA
GetModuleHandleA
FileTimeToLocalFileTime
GetExitCodeProcess
HeapCreate
lstrcmpiA
GetLogicalDrives
Sleep
GetDriveTypeA
TlsFree
GetStdHandle
lstrcmpiA
ntmarta
AccConvertAccessToSD
EventGuidToName
EventNameFree
AccFreeIndexArray
Sections
.text Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 607B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ