Static task
static1
Behavioral task
behavioral1
Sample
4f1251091ee89488c7077afb50d4da3e9d0b1774cb8f3b3578665421cacbbc5b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4f1251091ee89488c7077afb50d4da3e9d0b1774cb8f3b3578665421cacbbc5b.exe
Resource
win10v2004-20220812-en
General
-
Target
4f1251091ee89488c7077afb50d4da3e9d0b1774cb8f3b3578665421cacbbc5b
-
Size
300KB
-
MD5
70ce019568ea7ddae7b0be47581bc030
-
SHA1
b519f777e848aee0d0ff851fd0e13d8c823fe445
-
SHA256
4f1251091ee89488c7077afb50d4da3e9d0b1774cb8f3b3578665421cacbbc5b
-
SHA512
7d865a736485aafe53161edeedc864ea9df7316ccdbbca0ccad924cf14b80e5ababf85c076f16085d2061000245ba6733df0ea712cc524766e4a4bde245d27db
-
SSDEEP
6144:OnpLlZ+UNaCmnXREKCWsU/pLcKZHkAy/td3pFNGMeFuSaIDMY13/Oe:2Ll1ACmnXH3pLcKZEX1HN5ebas13G
Malware Config
Signatures
Files
-
4f1251091ee89488c7077afb50d4da3e9d0b1774cb8f3b3578665421cacbbc5b.exe windows x86
d3df3f200700474a7bf5a7fc23908ba1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapSize
VirtualProtect
CreatePipe
GetDriveTypeA
ResetEvent
GetProcessHeap
GetPriorityClass
GetModuleHandleA
GetFileAttributesA
WriteFile
GetLocaleInfoA
DeleteFileA
GetCommandLineA
IsBadWritePtr
ReleaseMutex
CreateDirectoryA
GetStdHandle
ReadConsoleW
SetLastError
SetLocalTime
RemoveDirectoryA
user32
DrawIcon
GetWindowLongW
GetWindowTextW
wsprintfA
SetCursor
GetCapture
PostMessageA
GetCaretPos
DestroyMenu
SetFocus
DispatchMessageA
LoadCursorA
PeekMessageA
els
DllRegisterServer
DllGetClassObject
DllRegisterServer
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ