Static task
static1
Behavioral task
behavioral1
Sample
c7749edb886cde7ab12cea2f919b61f901f4a95414b678f894ab774e010c5810.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c7749edb886cde7ab12cea2f919b61f901f4a95414b678f894ab774e010c5810.exe
Resource
win10v2004-20221111-en
General
-
Target
c7749edb886cde7ab12cea2f919b61f901f4a95414b678f894ab774e010c5810
-
Size
5.3MB
-
MD5
1c6414f94430f660fdddab798f13b014
-
SHA1
6fd54c0352fc9752dda4c1d93857e6925ea61fd8
-
SHA256
c7749edb886cde7ab12cea2f919b61f901f4a95414b678f894ab774e010c5810
-
SHA512
6b8e14b0209dc4f8c9fbe79338a1ef6bdc3a47a6337ddf8d426ff13120ff12b0d07847f517a876510a4e0c11d7e52e3b3cabf3fd654fb8a063696ed9f042a8ab
-
SSDEEP
98304:gXyxiR42oRHCwuFI10jSOVaC6SDJ7elSx1PlaqtyX:gXmIboRH910SkfxDJasQq4X
Malware Config
Signatures
Files
-
c7749edb886cde7ab12cea2f919b61f901f4a95414b678f894ab774e010c5810.exe windows x86
b386c32ba9febaecdab9b338eb22a204
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenFileMappingW
MapViewOfFile
CreateDirectoryW
GetModuleFileNameW
FindClose
SetEndOfFile
RemoveDirectoryW
lstrcpynW
CopyFileW
GetFileSize
CreateFileW
WriteFile
FindResourceW
GetTempPathW
LoadResource
ReadFile
LockResource
SizeofResource
MoveFileExW
DeleteFileW
GetTempFileNameW
SetFileAttributesW
FindFirstFileW
FindNextFileW
GetProcAddress
SetLastError
HeapAlloc
GetProcessHeap
TerminateProcess
HeapFree
CreateProcessW
GetCurrentDirectoryW
MultiByteToWideChar
SetFileTime
SetFilePointer
SystemTimeToFileTime
LocalFileTimeToFileTime
LeaveCriticalSection
GetLastError
OpenEventW
GetFileAttributesW
SetEvent
CloseHandle
GetCurrentThreadId
InterlockedExchange
InterlockedCompareExchange
WideCharToMultiByte
Sleep
DeleteCriticalSection
GetLocalTime
InitializeCriticalSection
EnterCriticalSection
SetUnhandledExceptionFilter
UnmapViewOfFile
GetCurrentProcessId
GetTickCount
GetCurrentProcess
CreateFileA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
GetStringTypeA
LoadLibraryA
LCMapStringW
LCMapStringA
VirtualAlloc
FlushFileBuffers
GetConsoleMode
GetConsoleCP
IsValidCodePage
HeapDestroy
HeapReAlloc
HeapSize
RaiseException
GetVersionExA
GetACP
GetLocaleInfoA
GetThreadLocale
UnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
GetOEMCP
user32
UnregisterClassA
SendMessageTimeoutW
FindWindowA
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
shlwapi
wnsprintfW
PathAddBackslashW
PathFileExistsW
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ