Static task
static1
Behavioral task
behavioral1
Sample
47a70293b59927962385d0fe29a3ce21d8592ffb5572fee230c3e813ac9ef766.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
47a70293b59927962385d0fe29a3ce21d8592ffb5572fee230c3e813ac9ef766.exe
Resource
win10v2004-20220812-en
General
-
Target
47a70293b59927962385d0fe29a3ce21d8592ffb5572fee230c3e813ac9ef766
-
Size
447KB
-
MD5
659ef1c1d60cddf94c3254fa62309100
-
SHA1
c70449a789d6a8e3f8fb13864d21f2bec545a828
-
SHA256
47a70293b59927962385d0fe29a3ce21d8592ffb5572fee230c3e813ac9ef766
-
SHA512
7079728653ec0c0a5fa10aa57d29de113f45dd970278c53a589496066096168794f7ecd9834b592312e6094a4693ab111e7b9641c9c4b0799bfef4be6c15f506
-
SSDEEP
12288:/F1cKax1OaUMoGmFj5uxHJj8SptZle9GoxWa/P:/F6fYZj2Jjvedxh
Malware Config
Signatures
Files
-
47a70293b59927962385d0fe29a3ce21d8592ffb5572fee230c3e813ac9ef766.exe windows x86
57c4ad791f157cde30159ba2ec803660
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlTraceDatabaseAdd
advapi32
ConvertSDToStringSDRootDomainA
kernel32
GetUserDefaultLCID
GetThreadLocale
GetThreadTimes
user32
GetFocus
Sections
.text Size: 440KB - Virtual size: 444KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 263B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE