Static task
static1
Behavioral task
behavioral1
Sample
7f456f8b01fc8866aeed4678a14479b6eaa62fed.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7f456f8b01fc8866aeed4678a14479b6eaa62fed.exe
Resource
win10v2004-20221111-en
General
-
Target
7f456f8b01fc8866aeed4678a14479b6eaa62fed
-
Size
566KB
-
MD5
f12de9a9858b332eb530c1f5cdc069aa
-
SHA1
7f456f8b01fc8866aeed4678a14479b6eaa62fed
-
SHA256
70ef80df596b9d7907c7d853d00b5e2191e18bcb0d909ee4a86a7b2137ff5b72
-
SHA512
6168bfe5c559b4b6223dd2d17be3a1ef3cc15f9f5f6f096a1c01ecc7b67432d24c9fb0cd5303fc8b6bd8448e0e4be57b17a17d8cc7870ff0bdd69e3c2bb439ca
-
SSDEEP
6144:vDbbqDfFxoi9qL0W4Rl/EagUzdxcXxcEMcCYjYdjVOQnbok9P4atXkisULOWn20n:veDfYatZlthsWEsVV5lUisULO/ZxxG
Malware Config
Signatures
Files
-
7f456f8b01fc8866aeed4678a14479b6eaa62fed.exe windows x86
79864519fd2abfc5966f91154262dd34
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualAlloc
VirtualFree
LoadLibraryW
IsBadReadPtr
HeapFree
FreeLibrary
Process32NextW
GetProcAddress
CreateToolhelp32Snapshot
LockResource
SizeofResource
LoadResource
FindResourceA
GetProcessHeap
HeapAlloc
Process32FirstW
Sleep
GetLastError
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
RaiseException
GetCommandLineA
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapCreate
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LoadLibraryA
user32
MessageBoxA
advapi32
CryptImportKey
CryptEncrypt
CryptAcquireContextW
Sections
.text Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 491KB - Virtual size: 491KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ