Static task
static1
Behavioral task
behavioral1
Sample
4ed62b0892442040e5264887d2800669ef47e756ba16068c60d1448933a208c7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4ed62b0892442040e5264887d2800669ef47e756ba16068c60d1448933a208c7.exe
Resource
win10v2004-20220812-en
General
-
Target
4ed62b0892442040e5264887d2800669ef47e756ba16068c60d1448933a208c7
-
Size
119KB
-
MD5
27dcad6488ce8bcb8e0bfc46bacec11f
-
SHA1
3c77fc685cc981635aaa92727648441df7c64a1b
-
SHA256
4ed62b0892442040e5264887d2800669ef47e756ba16068c60d1448933a208c7
-
SHA512
9c2972ea80bd7c6f0aa3c07977a1de0f210ea14b7cc832667df5c103d34de9ad4d6bb9741abac67c195180bfa55996f282c293a7097d74bb4a2546d576206d56
-
SSDEEP
1536:wAk/EDNZV9SVmXdLv1znNGdEewelt8sJWROzxK8b576UZzUGh/PKltxQVH6R4tAI:wcO6dLv1z4dEetlaswSVb1xBtPUmH6W
Malware Config
Signatures
Files
-
4ed62b0892442040e5264887d2800669ef47e756ba16068c60d1448933a208c7.exe windows x86
521c510f936114d63d5e8cdcce67b346
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextVolumeA
CreateSemaphoreA
lstrcmpW
GetConsoleMode
CloseHandle
ReadConsoleA
GetVolumePathNameW
GetStringTypeA
ReleaseSemaphore
FindFirstVolumeA
WaitForMultipleObjects
GetFullPathNameA
HeapCreate
GetFullPathNameA
GetCurrentDirectoryA
GetEnvironmentVariableW
OpenMutexW
CloseHandle
CloseHandle
GetModuleHandleA
GetDiskFreeSpaceW
GetFileAttributesW
GetModuleHandleW
dbghelp
ImageRvaToSection
ImageNtHeader
ImageRvaToVa
FindFileInPath
Sections
.text Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.res Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE