Static task
static1
Behavioral task
behavioral1
Sample
802adde2f73b801001415c095fcaffe3.exe
Resource
win7-20230220-en
General
-
Target
802adde2f73b801001415c095fcaffe3.exe
-
Size
6.8MB
-
MD5
802adde2f73b801001415c095fcaffe3
-
SHA1
e787c97d506802f78922e71a809f042e0b8a4239
-
SHA256
1cfa114e335202d50659ca4baec2671111f5a133a3f6817d7095c9670efde514
-
SHA512
9f583a0f19aaad94172d08d1fb673e947a95b47d264aab4bbc9a8cb0bd3c1704298bbb618cbfb5a3e386b43c1bdb4b3a218c10f3eab2434db7c605e913c7ae4e
-
SSDEEP
196608:rAgI4S0Ob45Tswtb/Yl/3+MFFT2qvW7ySS:caOb4BPx/wv+MFl2qvW7ySS
Malware Config
Signatures
Files
-
802adde2f73b801001415c095fcaffe3.exe.exe windows x86
7d59f1d82b84e111e9b6c1196cc48fca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
ReleaseDC
CharUpperBuffW
gdi32
CreateCompatibleBitmap
advapi32
RegQueryValueExW
shell32
SHFileOperationW
ole32
CreateStreamOnHGlobal
crypt32
CertFindChainInStore
wininet
InternetSetOptionA
ws2_32
send
Sections
.text Size: - Virtual size: 696KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: - Virtual size: 564B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bT! Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.5o\ Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uY1 Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 306KB - Virtual size: 305KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ