Static task
static1
Behavioral task
behavioral1
Sample
7b383669be1183faa7ee13a01329a8e3b8ebc2e3cf6f37726d630f9559a320d7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7b383669be1183faa7ee13a01329a8e3b8ebc2e3cf6f37726d630f9559a320d7.exe
Resource
win10v2004-20221111-en
General
-
Target
7b383669be1183faa7ee13a01329a8e3b8ebc2e3cf6f37726d630f9559a320d7
-
Size
69KB
-
MD5
44f397f6790ad95dfbe088033edd8500
-
SHA1
ee54491645d682bbdb1f5c45324fa0b2c76744da
-
SHA256
7b383669be1183faa7ee13a01329a8e3b8ebc2e3cf6f37726d630f9559a320d7
-
SHA512
b9e48eec5ea2b955ae1a8a996c90123c1e84b6343a20e31d19b5ea77971c608e2b471c21cc3a5ed2ed24db63f8301fde29939fef338b00368981dd147a3caf66
-
SSDEEP
768:nw1TUXxR6W0Rv7JeAzcoeLi8P2Qa3OsZRriafQCGMhJX56LuzxkHD/f+906C:uRRDJemeLiGI5rNfnhJp6MxgDmux
Malware Config
Signatures
Files
-
7b383669be1183faa7ee13a01329a8e3b8ebc2e3cf6f37726d630f9559a320d7.exe windows x86
1d397b0ad090f9012e03fecf313abd12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileIntA
WriteFileEx
lstrcmpA
Sleep
GetPrivateProfileIntA
FindResourceW
VirtualAllocEx
GetPrivateProfileSectionA
lstrcpyW
GetModuleHandleW
Sleep
Sleep
GetLongPathNameA
GetExitCodeProcess
LoadLibraryA
GetDiskFreeSpaceW
InterlockedDecrement
WaitForSingleObject
SetEnvironmentVariableA
GetDiskFreeSpaceW
GetFileAttributesA
ExitProcess
InterlockedIncrement
apphelp
ApphelpCheckExe
SdbCreateMsiTransformFile
AllowPermLayer
ApphelpCheckIME
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dbg Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ