Static task
static1
Behavioral task
behavioral1
Sample
4ecf4dac9966f1cb45a2fa867c3f7e63736b6d377a9f16c9b36696405ce5ce39.exe
Resource
win10-en-20211208
General
-
Target
4ecf4dac9966f1cb45a2fa867c3f7e63736b6d377a9f16c9b36696405ce5ce39
-
Size
3.6MB
-
MD5
b47f7078ad0d69e7fb52a6a3b8d8e2e1
-
SHA1
7024bbf3880f61a8bb00b25c83ed369c2a6cf0d5
-
SHA256
4ecf4dac9966f1cb45a2fa867c3f7e63736b6d377a9f16c9b36696405ce5ce39
-
SHA512
d88954c5f4854025efaff069b9eceea9d800c8ff531461bb70f2105499629df1d4d62e11ec799054ca78a5d9415cf57e34bcc3efc3838f8ead88b3a8b92fdb28
-
SSDEEP
98304:u6wRsdBmzm/syG1EaAfYMAV3MS8vlKjRy7CFj:u7s7mK/slpFMAiDvG
Malware Config
Signatures
Files
-
4ecf4dac9966f1cb45a2fa867c3f7e63736b6d377a9f16c9b36696405ce5ce39.exe windows x86
18df1dcc1fa258b4d6e464d165239b75
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
GetProcessWindowStation
advapi32
RegCloseKey
comctl32
PropertySheet
Sections
Size: - Virtual size: 5.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE