Static task
static1
Behavioral task
behavioral1
Sample
4c1b09674a43e70a808763ebb8b4a7a5e3baf7f0cb099f30b4c697e6c04bc5b8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4c1b09674a43e70a808763ebb8b4a7a5e3baf7f0cb099f30b4c697e6c04bc5b8.exe
Resource
win10v2004-20220812-en
General
-
Target
4c1b09674a43e70a808763ebb8b4a7a5e3baf7f0cb099f30b4c697e6c04bc5b8
-
Size
296KB
-
MD5
7afe22f55daa6c057eb88d4914ecec13
-
SHA1
38003fb068f09d712fa5df924be33429f269ba0b
-
SHA256
4c1b09674a43e70a808763ebb8b4a7a5e3baf7f0cb099f30b4c697e6c04bc5b8
-
SHA512
cade0666b6b0398c136778115ed60539d402c4246e991a9bc6b98dfc2ccdb391d296efeea9d9f0dcff1dda38a7ec1bc8b746592d97784f612d9e3f33061c6025
-
SSDEEP
6144:mKppbkDSGm1YpNDvf6hexW8MxJl8lWVgMXCyDg4XAsWol:ppbFgDv3W38ll4Cy9QsWQ
Malware Config
Signatures
Files
-
4c1b09674a43e70a808763ebb8b4a7a5e3baf7f0cb099f30b4c697e6c04bc5b8.exe windows x86
8e23cf56777186c63a47e730e3076deb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
RegEnumKeyExW
RegDeleteKeyA
RegEnumKeyExA
RegDeleteKeyW
RegSetValueExA
RegCreateKeyExA
kernel32
VirtualAlloc
LockResource
GetVersionExW
DeleteFileA
DeleteCriticalSection
LCMapStringA
WaitForSingleObject
GlobalUnlock
InterlockedCompareExchange
Sleep
EnterCriticalSection
HeapFree
GetStringTypeA
TryEnterCriticalSection
LeaveCriticalSection
GlobalAlloc
GlobalLock
CreateEventA
HeapAlloc
SetStdHandle
GetLocaleInfoA
lstrlenA
GlobalFree
LocalAlloc
LocalFree
GetModuleFileNameA
InterlockedExchange
GetModuleHandleA
GetStartupInfoA
mpr
WNetGetConnectionA
msvcrt
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_XcptFilter
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
_exit
__p__commode
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 280KB - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ