Static task
static1
Behavioral task
behavioral1
Sample
4ac060cc9efe070a961d313591ebad732f32ef82167d7e8f78707d3756abb6fe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4ac060cc9efe070a961d313591ebad732f32ef82167d7e8f78707d3756abb6fe.exe
Resource
win10v2004-20220812-en
General
-
Target
4ac060cc9efe070a961d313591ebad732f32ef82167d7e8f78707d3756abb6fe
-
Size
160KB
-
MD5
548eaf6c58cfb602abe0236836f2ef60
-
SHA1
5cc3ea5402a2ee8ad6caaa59c137f24b3c7c6b71
-
SHA256
4ac060cc9efe070a961d313591ebad732f32ef82167d7e8f78707d3756abb6fe
-
SHA512
980780abe3edee2a5debb8c8d7eb0c0520b41753360a622de4d64378a1fc337a4901225241e03c3cc24977ccd09551f6767244b4eff1bc9045329ee0d90e3fbd
-
SSDEEP
1536:mZmsN2K4xXEsCge4fbkO1OzU3+RdLV3w+1txGHw2CrOhePh4uboZ3IY5:mUj8wwOvqF9xgCrACPoZz
Malware Config
Signatures
Files
-
4ac060cc9efe070a961d313591ebad732f32ef82167d7e8f78707d3756abb6fe.exe windows x86
e9129bd64b21431402acabe0749ae276
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winhttp
WinHttpGetDefaultProxyConfiguration
WinHttpCreateUrl
kernel32
GetTickCount
ExitProcess
GetExitCodeProcess
ReadFile
GetModuleHandleA
GetAtomNameA
GetFileSize
LocalAlloc
CreateFileA
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
GetCurrentProcessId
GetModuleFileNameA
GetSystemTimeAsFileTime
InterlockedExchange
Sleep
user32
LoadIconA
LoadCursorA
RegisterClassA
FindWindowA
ShowWindow
UpdateWindow
PostMessageA
gdi32
AbortDoc
CreateFontA
msvcr80
_amsg_exit
free
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
malloc
__getmainargs
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ