4e6266fbc4a6cc09304e582382095dc5681493589f6e2dc60ba968c3101ae2c8 | Triage

Submit
Reports

Overview

overview

Static

static

4e6266fbc4...c8.exe

windows7-x64

4e6266fbc4...c8.exe

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

4e6266fbc4a6cc09304e582382095dc5681493589f6e2dc60ba968c3101ae2c8.exe

Resource

win7-20220715-en

teslacrypt persistence ransomware spyware stealer

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral2

Sample

4e6266fbc4a6cc09304e582382095dc5681493589f6e2dc60ba968c3101ae2c8.exe

Resource

win10v2004-20220414-en

teslacrypt persistence ransomware spyware stealer

windows10-2004-x64

13 signatures

150 seconds

General

Target

4e6266fbc4a6cc09304e582382095dc5681493589f6e2dc60ba968c3101ae2c8
Size

328KB
MD5

68e815419a02c8d958a2bd5ecbe046c7
SHA1

812292949d5512e3a319396e9b69aed1497e7cca
SHA256

4e6266fbc4a6cc09304e582382095dc5681493589f6e2dc60ba968c3101ae2c8
SHA512

f4f5d2f4880c34b60d2264e304f85862fa3fab51a367fd946377dfded58b8c1cff221c93bfca02783ba8fb4954bc920c655e13696502ffb1b80c1543e61e9839
SSDEEP

3072:80GtrbCIfLPIAsNm/4Nq8WgfPhhwEqTUJX08lYoQ59IDU7gXJAqiZatqYAaHerw1:87rbCsIPe4EMM8qDEApqictqYAakqFt

Score

N/A

Malware Config

Signatures

Files

4e6266fbc4a6cc09304e582382095dc5681493589f6e2dc60ba968c3101ae2c8
.exe windows x86

979dd1abdd98c9211a908b1d3b3c8ff1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

mblen
iswalpha
labs
memcmp

user32

FindWindowW

kernel32

MoveFileWithProgressW
CopyFileW
GetExitCodeThread
WaitForSingleObject
CreateThread
LoadLibraryW
SetDefaultCommConfigA
LCMapStringA
FreeLibrary

ole32

StgConvertPropertyToVariant

shell32

Shell_NotifyIconA

setupapi

SetupInstallServicesFromInfSectionExW

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

acab
Size: 4KB - Virtual size: 441B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

abac
Size: 4KB - Virtual size: 47B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 296KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.