Static task
static1
Behavioral task
behavioral1
Sample
4c20ac8b397d79b17d1c3a7f875587e479448723039ae25f26f2482d00d03b89.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4c20ac8b397d79b17d1c3a7f875587e479448723039ae25f26f2482d00d03b89.exe
Resource
win10v2004-20220812-en
General
-
Target
4c20ac8b397d79b17d1c3a7f875587e479448723039ae25f26f2482d00d03b89
-
Size
110KB
-
MD5
0f21d0228dbb9374f8604f5df8154076
-
SHA1
2f3e75fef1bd5f481058faf523f24bad6815f848
-
SHA256
4c20ac8b397d79b17d1c3a7f875587e479448723039ae25f26f2482d00d03b89
-
SHA512
930614c67b153f037ffc06fa0414c0c5a34b9d8de98b5b73ab51f4fcba9fca8a48164f7e8ba3af818070e8a6078a0624c61201f76770ffac61206476d4f21259
-
SSDEEP
1536:wR8KlXwn5VqdAh9XtXt4bFEBtRNfyoC2YvCmX1rrnr3SjL5qXoIM2Y64vmt:wRjA5VODgD+vXrnrSLI4IMkrt
Malware Config
Signatures
Files
-
4c20ac8b397d79b17d1c3a7f875587e479448723039ae25f26f2482d00d03b89.exe windows x86
f3c3704f46431ab70cb9082b3c424022
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
LCMapStringA
IsDBCSLeadByte
GetThreadLocale
GetExitCodeProcess
GetEnvironmentVariableA
SetFilePointer
RtlMoveMemory
GetCurrentThread
GetModuleHandleA
GetProcAddress
GetCurrentProcess
OpenProcess
WriteConsoleA
GetFileAttributesA
WaitForSingleObject
OutputDebugStringA
GetVersion
GetOEMCP
SizeofResource
DeleteFileA
LoadResource
RemoveDirectoryA
VirtualFree
VirtualProtect
FormatMessageA
GetShortPathNameA
msvcrt
tan
_controlfp
__getmainargs
_except_handler3
_initterm
_exit
__p__commode
__p___initenv
__p__fmode
__set_app_type
_XcptFilter
_adjust_fdiv
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Houitig Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ