Static task
static1
Behavioral task
behavioral1
Sample
4df21a100a33179ec5c5e82cd3b0297f6fd6c3186514b37fe98c564736a0490c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4df21a100a33179ec5c5e82cd3b0297f6fd6c3186514b37fe98c564736a0490c.exe
Resource
win10v2004-20220901-en
General
-
Target
4df21a100a33179ec5c5e82cd3b0297f6fd6c3186514b37fe98c564736a0490c
-
Size
128KB
-
MD5
6c950e1713a28210570f1b6d151d071e
-
SHA1
54f1e86f1cbc04d7954bdbfb1efa64b5c0f17811
-
SHA256
4df21a100a33179ec5c5e82cd3b0297f6fd6c3186514b37fe98c564736a0490c
-
SHA512
c36ec8c54e56179af74c2ee642d5f70b2fbc84192c9c4babb0e9b76bcf6084e2aecf578ddc8ceb821dc6bf643f02d32f256070af322c2b94d0bdb05f57073a7b
-
SSDEEP
3072:c4XhIwhbooTU7Nd8d+ZAYQeM1kZyTDRUN2jk2hXuq+o7VqjkesJ:2NyfYQeM1kZyTDRXjk2hXu+7kkeE
Malware Config
Signatures
Files
-
4df21a100a33179ec5c5e82cd3b0297f6fd6c3186514b37fe98c564736a0490c.exe windows x86
6df0c82df9dee64d9312f11dda3757c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetExitCodeThread
FindClose
SetLastError
GetLocaleInfoW
GetCurrentProcess
GetTickCount
GetModuleHandleA
FindResourceW
CreateDirectoryW
GetStringTypeA
VirtualProtect
RemoveDirectoryW
GetDriveTypeW
GetFileAttributesA
IsBadWritePtr
MapViewOfFile
LocalLock
HeapFree
IsValidCodePage
TlsGetValue
GetFileAttributesA
user32
GetWindowTextW
GetWindowLongW
LoadStringA
SetCursor
LoadImageW
wsprintfW
IsDialogMessageA
LoadCursorA
PostMessageW
SetFocus
DispatchMessageA
IsWindow
PeekMessageW
msctf
DllUnregisterServer
DllUnregisterServer
TF_InitSystem
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE