Static task
static1
Behavioral task
behavioral1
Sample
4ce09eadbc4e90371ed177e5f785bf4e3d4d7df0011d4c065c4a886f9cf59cdd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4ce09eadbc4e90371ed177e5f785bf4e3d4d7df0011d4c065c4a886f9cf59cdd.exe
Resource
win10v2004-20220812-en
General
-
Target
4ce09eadbc4e90371ed177e5f785bf4e3d4d7df0011d4c065c4a886f9cf59cdd
-
Size
109KB
-
MD5
85bd8066fbd16e20c01de2867f7821a8
-
SHA1
a2db2d1184a0685b58447d665d9e593aa1949853
-
SHA256
4ce09eadbc4e90371ed177e5f785bf4e3d4d7df0011d4c065c4a886f9cf59cdd
-
SHA512
33fea073d8f154d726b0a6ce022e961f77d68670302ee388285f136ca2b3b86eb41ab682ab0cea57b84c2158f7e3eb49d506efb01725f433337ef7450c41915f
-
SSDEEP
3072:QmdjSceoH0CojRqz6GolOmrtt0Qty8qtinDMX:HSce61oj0zOBt0Qcti4X
Malware Config
Signatures
Files
-
4ce09eadbc4e90371ed177e5f785bf4e3d4d7df0011d4c065c4a886f9cf59cdd.exe windows x86
6167e33b2d32520a77471e68f7ad63fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumTimeFormatsW
ReadFileScatter
CompareStringA
IsValidCodePage
GetConsoleCharType
BackupRead
GetNumaAvailableMemoryNode
VDMOperationStarted
GetDevicePowerState
EnterCriticalSection
HeapCreate
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 85KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE