Static task
static1
Behavioral task
behavioral1
Sample
4823b10610423a4466c0cce310cbc8d3fa361e0fca5301b1fcefc64291797f4a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4823b10610423a4466c0cce310cbc8d3fa361e0fca5301b1fcefc64291797f4a.exe
Resource
win10v2004-20220901-en
General
-
Target
4823b10610423a4466c0cce310cbc8d3fa361e0fca5301b1fcefc64291797f4a
-
Size
27KB
-
MD5
328c5ce9467349ee0e481fb6fb57ab20
-
SHA1
301eaa1f7902e35032b931a53860bc70716e1bb8
-
SHA256
4823b10610423a4466c0cce310cbc8d3fa361e0fca5301b1fcefc64291797f4a
-
SHA512
fde6654d4e33dde704b2437e1fc3ef5aae1d04e189f75e287c6c5e1b3ec6152a88c037f16833a75645cde1ea1aa401144bf5ebf4fc4b39e202dfb7aaf308a656
-
SSDEEP
384:zTfHYhrl1sr+J4NyKlTzW6SUWwQR5AWgua6hUiGSABk4zZwTQN8zR5F6n0FGpUWX:QH1sSuNbTge3WtJUZD24z9y1jqUWwQC
Malware Config
Signatures
Files
-
4823b10610423a4466c0cce310cbc8d3fa361e0fca5301b1fcefc64291797f4a.exe windows x86
b8fce86f8f679b9fc7368f8f47778678
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
SetPriorityClass
GetCurrentProcess
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
LocalAlloc
GetCurrentProcessId
msvcrt
__set_app_type
?terminate@@YAXXZ
__p__fmode
_controlfp
__p__commode
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
wcsncmp
wcschr
wcstoul
_except_handler4_common
memcpy
ole32
CoCreateInstance
CoUninitialize
CoInitializeEx
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE