Static task
static1
Behavioral task
behavioral1
Sample
4297f03e1e56360f38907c166b6ebb681b7546a4296b8bf774b6c2e33e427b7f.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
4297f03e1e56360f38907c166b6ebb681b7546a4296b8bf774b6c2e33e427b7f.exe
Resource
win10v2004-20220414-en
General
-
Target
4297f03e1e56360f38907c166b6ebb681b7546a4296b8bf774b6c2e33e427b7f
-
Size
488KB
-
MD5
47ad4b07e1f70a187edbe3fe4d39e8a5
-
SHA1
faec5a208c4e96d6b925bb05a0c43749606f5cee
-
SHA256
4297f03e1e56360f38907c166b6ebb681b7546a4296b8bf774b6c2e33e427b7f
-
SHA512
0f8e7d7a345a67a38fec7806507934b871395a4cc36549c2b20cb2034def2a4d55bfde72847d077dda4e63c817ba93357688d66c70b2cfdbd56e4a1ec30e9a2f
-
SSDEEP
6144:MdUjW+XsURkmUr188z/9BKUY/lN1xv2IYqoUWMGlHuS2FDcOq:ry+6rCEmD/lxv2IToLazZJ
Malware Config
Signatures
Files
-
4297f03e1e56360f38907c166b6ebb681b7546a4296b8bf774b6c2e33e427b7f.exe windows x86
92574d687b627063594427cb4bd52443
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowWindow
GetShellWindow
GetClassNameA
kernel32
GetModuleHandleA
GetConsoleWindow
VirtualQuery
VirtualProtect
msvcrt
sprintf
memcpy
Sections
.text Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 870B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 60KB - Virtual size: 58KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Xd Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
n Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.erloc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
prmM2Z Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE