Static task
static1
Behavioral task
behavioral1
Sample
4932509bfc73e4ff0d7e54a10c5473172a2ece2c82d9db131fab5c99db996280.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
4932509bfc73e4ff0d7e54a10c5473172a2ece2c82d9db131fab5c99db996280.exe
Resource
win10v2004-20220414-en
General
-
Target
4932509bfc73e4ff0d7e54a10c5473172a2ece2c82d9db131fab5c99db996280
-
Size
360KB
-
MD5
76a3789daf65e3ce4e6ecd198b15e24c
-
SHA1
b922db959cf6f97f7e6f56900b552327add0140c
-
SHA256
4932509bfc73e4ff0d7e54a10c5473172a2ece2c82d9db131fab5c99db996280
-
SHA512
2650917aee8c284c71fa1e03db75611b37b818ab0ab701bdcb3da0eac2fb0eee3b4a1150447e44a0d4a1b9e03dc2e4b357ed0a6839218e3825455de86439b37a
-
SSDEEP
6144:Jdm3S6zJVze75l3XnM++GvyNFi/kF3O+U7rGhYMTdiUF/6:r6KnZKN0MMLruYMTdi8/6
Malware Config
Signatures
Files
-
4932509bfc73e4ff0d7e54a10c5473172a2ece2c82d9db131fab5c99db996280.exe windows x86
b34f437b6d98b5adb2247709875bf81f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
MapViewOfFile
TerminateProcess
OpenFileMappingW
CreateThread
GetProcAddress
UnhandledExceptionFilter
CreateEventW
LocalAlloc
UnmapViewOfFile
GetCurrentThreadId
GetNumberFormatW
GetCurrentProcessId
GetLastError
SetEvent
FreeLibrary
GetModuleHandleA
GetExitCodeProcess
VirtualProtect
VirtualQuery
GetCommandLineW
lstrlenW
FreeConsole
pdh
PdhReadRawLogRecord
msvcrt
memcpy
user32
GetClassNameA
GetShellWindow
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 275KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
O_8!Iz Size: 148KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 148KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ