Static task
static1
Behavioral task
behavioral1
Sample
4f6681e49a69a19d4c45e6ba9d3a449ea32eb2ef9bf73c238fec3b7eb25e383f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4f6681e49a69a19d4c45e6ba9d3a449ea32eb2ef9bf73c238fec3b7eb25e383f.exe
Resource
win10v2004-20220812-en
General
-
Target
4f6681e49a69a19d4c45e6ba9d3a449ea32eb2ef9bf73c238fec3b7eb25e383f
-
Size
391KB
-
MD5
4bba726368c29e6550b1876dfa27dda0
-
SHA1
6e54afc47652401f91572df4132eddcd454889d9
-
SHA256
4f6681e49a69a19d4c45e6ba9d3a449ea32eb2ef9bf73c238fec3b7eb25e383f
-
SHA512
214b61aa75b578e083f3408a63316712b4170119a8579c8b416cadc2a9367f5b0e598b559505843cea3a2a35cb96dd08019a807a12fc94618be062ad3d74f399
-
SSDEEP
12288:ysLLRMNKHEAJLjpFv6w2K/PkFtlVMHFWg1EOfoMzCc3Sa0n:vRM4kAJLjpFvN/ytkjEOfoMWN
Malware Config
Signatures
Files
-
4f6681e49a69a19d4c45e6ba9d3a449ea32eb2ef9bf73c238fec3b7eb25e383f.exe windows x86
32bace558a1feaad6430a37b531d53e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
FindAtomA
GetEnvironmentVariableW
ReleaseMutex
GetCurrentThreadId
LocalFree
InitializeCriticalSection
CreateEventW
IsBadStringPtrW
WriteFile
GlobalFlags
HeapCreate
GetCurrentProcessId
GetDriveTypeA
ReleaseMutex
GetFileTime
lstrlenW
GetPrivateProfileStringA
FindClose
LoadLibraryW
user32
DrawTextA
SetFocus
CreateWindowExA
GetClassInfoA
IsWindow
GetKeyboardType
DrawStateW
GetClientRect
DispatchMessageA
GetSysColor
EndDialog
GetSysColor
CallWindowProcW
rastapi
DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone
advapi32
InitializeSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 381KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ