Static task
static1
Behavioral task
behavioral1
Sample
4cac2d19ecfa04ad8c420789bd845d222c988a6e4aec388ef02f04cb1bb739d9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4cac2d19ecfa04ad8c420789bd845d222c988a6e4aec388ef02f04cb1bb739d9.exe
Resource
win10v2004-20220812-en
General
-
Target
4cac2d19ecfa04ad8c420789bd845d222c988a6e4aec388ef02f04cb1bb739d9
-
Size
1.1MB
-
MD5
8df3daa8ae5da4f7733a0e5ab406493a
-
SHA1
31149d96b2cff07c19b5324474a74bb6484b83e3
-
SHA256
4cac2d19ecfa04ad8c420789bd845d222c988a6e4aec388ef02f04cb1bb739d9
-
SHA512
7ccbb6cdb5931fe587187cac220e731c1a6acee726902be4b90fb4c7be29ea8d8b6ca943e8b5d55777c2910b3f4d0682512155490bc2fd945f890d4ac5097891
-
SSDEEP
24576:cvWemcHS6h9gJLn+bg2AAmHngprHQ5BxTMD:ogcHbtWHgprQLpMD
Malware Config
Signatures
Files
-
4cac2d19ecfa04ad8c420789bd845d222c988a6e4aec388ef02f04cb1bb739d9.exe windows x86
93cd99753d7e990639202b516f015590
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetCurrentThread
GetVersion
GetCurrentProcessId
GetSystemDefaultLangID
GetUserDefaultLangID
GetSystemDefaultLCID
GetCurrentProcess
GetCommandLineA
GetLastError
GetModuleHandleA
GetUserDefaultLCID
HeapAlloc
GetProcessHeap
InterlockedIncrement
Sleep
GetStringTypeW
HeapReAlloc
GetProcAddress
FindFirstFileW
FreeEnvironmentStringsW
IsDebuggerPresent
WriteFile
InterlockedExchange
GetCurrentThreadId
SetEnvironmentVariableA
GetModuleFileNameW
LoadLibraryA
SetHandleCount
HeapDestroy
TlsGetValue
Sections
.text Size: 332KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 902B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 784KB - Virtual size: 783KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ