Static task
static1
Behavioral task
behavioral1
Sample
4eace31e2ba8070a8f3a4e68b28e58e674369cf7913fa30dc1e68f5b5135bfc7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4eace31e2ba8070a8f3a4e68b28e58e674369cf7913fa30dc1e68f5b5135bfc7.exe
Resource
win10v2004-20220812-en
General
-
Target
4eace31e2ba8070a8f3a4e68b28e58e674369cf7913fa30dc1e68f5b5135bfc7
-
Size
156KB
-
MD5
75f9e1cd027f7a0d6befa1e8ec2039ab
-
SHA1
456c49b261de84e8b6266e58e21e52608ca9da18
-
SHA256
4eace31e2ba8070a8f3a4e68b28e58e674369cf7913fa30dc1e68f5b5135bfc7
-
SHA512
120500f007c6e7e4e62adc15a1c55d897d8fec54e50632e42b4dbaa80cb3636c1992fccf8e5c74c10e5d3685764723adfa7f5caea38167e8baff867cf11b45bc
-
SSDEEP
3072:6oLgViTbucAhSiLg9Ak+n1GE7Nd+7pDGdyDpYik0sbqBkaIvUO:6CggTAs9n+8EJGJDCV9HUO
Malware Config
Signatures
Files
-
4eace31e2ba8070a8f3a4e68b28e58e674369cf7913fa30dc1e68f5b5135bfc7.exe windows x86
25ae47312948f8a1dbb8acb2bd058c07
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameW
GetSystemDirectoryA
GetCPInfo
lstrcmpiA
lstrcmpA
lstrlenA
PulseEvent
GetCommandLineW
GetSystemInfo
GetTimeFormatA
GetEnvironmentStrings
SearchPathA
FormatMessageA
OpenEventA
ResetEvent
WideCharToMultiByte
GlobalAddAtomA
SetLocaleInfoW
lstrcpynA
GetModuleHandleA
GetStartupInfoA
GetStringTypeA
msvcrt
_except_handler3
_tzset
_exit
_initterm
_adj_fdivr_m64
cos
gets
_purecall
__p__commode
_XcptFilter
_adj_fprem1
exit
__getmainargs
fread
strlen
__setusermatherr
_mbsnbicmp
_beep
_controlfp
_acmdln
_isatty
_searchenv
_adjust_fdiv
__p__fmode
iswalnum
__set_app_type
memcpy
Sections
.text Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ