Static task
static1
Behavioral task
behavioral1
Sample
4cf6275d7784ec35676b3db529d6a459e3f695e96089c80d2093a7df8f29fd66.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4cf6275d7784ec35676b3db529d6a459e3f695e96089c80d2093a7df8f29fd66.exe
Resource
win10v2004-20220812-en
General
-
Target
4cf6275d7784ec35676b3db529d6a459e3f695e96089c80d2093a7df8f29fd66
-
Size
1.1MB
-
MD5
f8874122e66549152940b4de4cd8b272
-
SHA1
6d17fee56b8f9953b5b4bfba27cf35e596626585
-
SHA256
4cf6275d7784ec35676b3db529d6a459e3f695e96089c80d2093a7df8f29fd66
-
SHA512
8817bb625d46975ee6605f168f94b59253f619cf3c99f580084629cd6792666f498d89b1734f9ccd6be90b90756c95dbe97e2ec6f6e90142a5a3ae6539e2c482
-
SSDEEP
768:qqq4l+ousmln/kKczug2wC9U0FotCNuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuu3:qx48/smRr76tC+
Malware Config
Signatures
Files
-
4cf6275d7784ec35676b3db529d6a459e3f695e96089c80d2093a7df8f29fd66.exe windows x86
6d9c8f7aa3adb59a3a326b742e228503
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
CreateFileA
GetLastError
VirtualProtect
VirtualAlloc
GetProcAddress
LoadLibraryA
GetModuleHandleA
lstrcmpiA
VirtualFree
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
FlushFileBuffers
SetEndOfFile
SetStdHandle
SetFilePointer
ReadFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
IsBadWritePtr
HeapReAlloc
RtlUnwind
HeapFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
user32
LoadStringA
RegisterClassExA
LoadCursorA
LoadIconA
wsprintfA
MessageBoxA
EndDialog
DefWindowProcA
DestroyWindow
DialogBoxParamA
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
wininet
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ