Static task
static1
Behavioral task
behavioral1
Sample
7e306110ec9c01320b2356d94010ed581e77b6014d80aacba441b4bd09ec7e37.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
7e306110ec9c01320b2356d94010ed581e77b6014d80aacba441b4bd09ec7e37.exe
Resource
win10v2004-20230220-en
General
-
Target
7e306110ec9c01320b2356d94010ed581e77b6014d80aacba441b4bd09ec7e37
-
Size
2.4MB
-
MD5
2e3ac1140254a256fd4e34768cb67a6e
-
SHA1
1fc2a98fa4d61dc8639a30382a92c10782f0e7f2
-
SHA256
7e306110ec9c01320b2356d94010ed581e77b6014d80aacba441b4bd09ec7e37
-
SHA512
225c4e4057a3115c473fd7b76802349bc4dafcd4fb7ed42e4eaf8b650c9b5f5b8fa04d9a54113991923d1c84b5513ef6fa201400e6dfb925122a507482dc34a3
-
SSDEEP
49152:flYLIm/LsNN/KSr4vFCyLjTRwulp4/IJg8yn6Uc9V+szVO:d+GDr4vF9HpdUggsU
Malware Config
Signatures
Files
-
7e306110ec9c01320b2356d94010ed581e77b6014d80aacba441b4bd09ec7e37.exe windows x64
69836d18a4950b30c96a22d9053f61da
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
wsock32
send
version
GetFileVersionInfoW
winmm
timeGetTime
comctl32
ImageList_ReplaceIcon
mpr
WNetUseConnectionW
wininet
InternetReadFile
psapi
GetProcessMemoryInfo
iphlpapi
IcmpCreateFile
userenv
UnloadUserProfile
uxtheme
IsThemeActive
kernel32
WaitForSingleObject
user32
RegisterHotKey
gdi32
StrokePath
comdlg32
GetOpenFileNameW
advapi32
GetAce
shell32
DragQueryPoint
ole32
CoTaskMemAlloc
oleaut32
UnRegisterTypeLi
msvcrt
_wcsnicmp
Sections
.text Size: 478KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ