Static task
static1
Behavioral task
behavioral1
Sample
4c6d97034074682f38ce48aecce55cf912fa82fe6094329e998f8ab92d138ab7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4c6d97034074682f38ce48aecce55cf912fa82fe6094329e998f8ab92d138ab7.exe
Resource
win10v2004-20220812-en
General
-
Target
4c6d97034074682f38ce48aecce55cf912fa82fe6094329e998f8ab92d138ab7
-
Size
119KB
-
MD5
0f98676ef566607ba90ee2a73fb4c7e5
-
SHA1
a953e8e0dcabcc5a86b955732683da2ac3060b69
-
SHA256
4c6d97034074682f38ce48aecce55cf912fa82fe6094329e998f8ab92d138ab7
-
SHA512
7db3cb428137e008ce3e0fe7f56f1526f136860b2fb981d2b988b74d8e782c35d2c1f69fdaa79e9c2f7ce94933b7f1f462717d0a6c94aa43d32b0143fb9400ad
-
SSDEEP
1536:hFBxUnU0KldkjElnZYvc3S6P7AOTRpjVrs2ryrd1vUQuqSSqK5tnCvv:n/UU0KlsgZyUSe7AqRHs2qxnC
Malware Config
Signatures
Files
-
4c6d97034074682f38ce48aecce55cf912fa82fe6094329e998f8ab92d138ab7.exe windows x86
c3427b856e0b21e748ea9533bd709e7b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RegisterWaitForInputIdle
DuplicateConsoleHandle
DecodeSystemPointer
CopyFileW
GetConsoleFontSize
CreateJobObjectW
HeapExtend
CommConfigDialogW
GetLocaleInfoA
FindFirstVolumeA
GlobalGetAtomNameA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 63KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE