Static task
static1
Behavioral task
behavioral1
Sample
4cbd463e24ab8330ca25300980db78309bdf842faf4caf606450c761822c7041.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4cbd463e24ab8330ca25300980db78309bdf842faf4caf606450c761822c7041.exe
Resource
win10v2004-20220812-en
General
-
Target
4cbd463e24ab8330ca25300980db78309bdf842faf4caf606450c761822c7041
-
Size
125KB
-
MD5
523a27f493bb0a1adec9a9d8301c535f
-
SHA1
d346b1d7b551caf98306dadead9ed57441675408
-
SHA256
4cbd463e24ab8330ca25300980db78309bdf842faf4caf606450c761822c7041
-
SHA512
b16026e4ca8db0df2a87319feb204c4c96d1ecc793ce21bd4d2c6f2b6233ffd81592b15c3ccf607ba16f3e8c3432406515fb8c1587d00da0fc5b96892ebbc494
-
SSDEEP
1536:ngp9gB9r3ug1uQr7DrL93iRhAdAOdJw4Cn3N0Oe7bOcNMGTT2vAoLHiDnCYCp3:2gB9r3VO9rbHIn3Q3
Malware Config
Signatures
Files
-
4cbd463e24ab8330ca25300980db78309bdf842faf4caf606450c761822c7041.exe windows x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.text Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE