Static task
static1
Behavioral task
behavioral1
Sample
7c3347273f3c44a4db59cb8f66f44d14b1b4f7880371de52230a4333162e3a56.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7c3347273f3c44a4db59cb8f66f44d14b1b4f7880371de52230a4333162e3a56.exe
Resource
win10v2004-20221111-en
General
-
Target
7c3347273f3c44a4db59cb8f66f44d14b1b4f7880371de52230a4333162e3a56
-
Size
308KB
-
MD5
27120a6bcd6a113622dd47a5595b8f30
-
SHA1
922594ac95d98c51408a3c50200b4a2a9acfd8e9
-
SHA256
7c3347273f3c44a4db59cb8f66f44d14b1b4f7880371de52230a4333162e3a56
-
SHA512
701117981399b2aad66e8bf22582501a69bad0f833f5be485a9abfcfb5439289b8f25146f160464267fc85a6d54f94e3e82f55fa3d758a0189557c2ad965eac1
-
SSDEEP
6144:dXWJKeKL+gW6dSzDvGJptibfcMpipFl4M/BcGgrIi0:dXW098zDv871MEtJJclIi0
Malware Config
Signatures
Files
-
7c3347273f3c44a4db59cb8f66f44d14b1b4f7880371de52230a4333162e3a56.exe windows x86
8715cb9b7683c8bf00b57116a36bf278
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetLongPathNameA
GetDiskFreeSpaceW
VirtualAllocEx
GetCurrentDirectoryA
GetStringTypeW
GetACP
lstrcpyW
GetExitCodeProcess
InterlockedIncrement
GetPrivateProfileIntA
GetPrivateProfileIntA
WaitForSingleObject
GetModuleHandleW
GetPrivateProfileSectionA
ExitProcess
InterlockedDecrement
lstrcmpA
ReadFileEx
SetEnvironmentVariableA
Heap32First
FindResourceW
GetDiskFreeSpaceW
apphelp
AllowPermLayer
ApphelpCheckIME
SdbCreateMsiTransformFile
ApphelpCheckExe
shell32
ShellMessageBoxA
StrChrA
ShellAboutA
SHFree
DragAcceptFiles
SHGetMalloc
SHGetDiskFreeSpaceA
ExtractIconA
DllUnregisterServer
SHGetSettings
DragQueryFileA
DragFinish
DuplicateIcon
dbghelp
ImageRvaToVa
Sections
.text Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dbg Size: 304KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE