Static task
static1
Behavioral task
behavioral1
Sample
7eb4653d81a0d70d3edd196b80e5fc08f189ade7adbffb46a765e857faa20a4a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
7eb4653d81a0d70d3edd196b80e5fc08f189ade7adbffb46a765e857faa20a4a.exe
Resource
win10v2004-20230220-en
General
-
Target
7eb4653d81a0d70d3edd196b80e5fc08f189ade7adbffb46a765e857faa20a4a
-
Size
1.8MB
-
MD5
3f3922f72375e4242e3e533125cd3fb8
-
SHA1
58768ac71c9c9e5aa5c2483b7f6a94ea7b22bc67
-
SHA256
7eb4653d81a0d70d3edd196b80e5fc08f189ade7adbffb46a765e857faa20a4a
-
SHA512
7db0c4b5cc1ca337073bd1dfa8a20e24d9ed35af84878f8678c038de8e3d3caae55744cbef9335e3d437c42eb6f2f317d648f841b9712c4d54d4e3ac31b61a7c
-
SSDEEP
49152:pc7uvpS3C2g3SxBOp1B07sjsPEtd2znPrnIwuh0N3zP:PS3c3SbOp1S7sjXqnmu
Malware Config
Signatures
Files
-
7eb4653d81a0d70d3edd196b80e5fc08f189ade7adbffb46a765e857faa20a4a.exe windows x86
beca54b9299c849313fe79035a5fdad5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
DeviceIoControl
CloseHandle
FindFirstVolumeW
GetLastError
FindNextVolumeW
SetLastError
SetFilePointerEx
ReadFile
WriteFile
GetVolumePathNamesForVolumeNameW
GetVolumeInformationW
GetStdHandle
GetConsoleMode
SetConsoleMode
GetTempFileNameW
GetStartupInfoW
CreateProcessW
DeleteFileW
WaitForSingleObject
GetTempPathW
GetDiskFreeSpaceExW
GetDriveTypeW
SetFileAttributesW
GetFileAttributesW
GetModuleHandleW
FindResourceW
LoadResource
LockResource
SizeofResource
FreeResource
GetModuleFileNameW
SetEndOfFile
HeapSize
SetStdHandle
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwind
RaiseException
FreeLibrary
LoadLibraryExW
RemoveDirectoryW
GetFileAttributesExW
CreateDirectoryW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapFree
HeapAlloc
GetFileType
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadConsoleW
GetConsoleCP
GetFileSizeEx
GetExitCodeProcess
FlushFileBuffers
HeapReAlloc
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
WriteConsoleW
user32
wsprintfW
Sections
.text Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ