Static task
static1
Behavioral task
behavioral1
Sample
7cf9f8573f803fa7a168eeee770332760d9cfa139f518a4a4ff6a40815e7d76f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7cf9f8573f803fa7a168eeee770332760d9cfa139f518a4a4ff6a40815e7d76f.exe
Resource
win10v2004-20220812-en
General
-
Target
7cf9f8573f803fa7a168eeee770332760d9cfa139f518a4a4ff6a40815e7d76f
-
Size
156KB
-
MD5
534370065f0f28b2333cc2f718286f42
-
SHA1
f0078d002eb2dc8f5b7b6dee6625357cdcb78f27
-
SHA256
7cf9f8573f803fa7a168eeee770332760d9cfa139f518a4a4ff6a40815e7d76f
-
SHA512
d2cd4e88074d7493c8a30da7eee513603c0475e38bbcf611e049326b158c643e21ae1ea4473353b50cc9c342ae92c03d6eb1787c3699bab74bd7331d3a70ec3b
-
SSDEEP
1536:CsLNK/y4ecQ371xAj5OKxps0a77777777777777777777777777777777777777k:nLEy4Y3vAj5lhhsOowl
Malware Config
Signatures
Files
-
7cf9f8573f803fa7a168eeee770332760d9cfa139f518a4a4ff6a40815e7d76f.exe windows x86
68c4a1aa2c45a028f79e0b79228af963
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
TerminateProcess
FreeEnvironmentStringsA
UnhandledExceptionFilter
CloseHandle
FlushFileBuffers
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
InterlockedIncrement
GetModuleFileNameA
LoadLibraryA
GetCurrentProcess
HeapValidate
GetCPInfo
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
GetLastError
SetConsoleCtrlHandler
IsBadWritePtr
IsBadReadPtr
user32
DispatchMessageA
TranslateMessage
SetWindowTextA
MoveWindow
SendMessageA
GetMenu
EnableMenuItem
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
RegisterClassExA
LoadCursorA
GetMessageA
gdi32
GetStockObject
Sections
.text Size: 124KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 857B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ