Static task
static1
Behavioral task
behavioral1
Sample
4677f46ebfbb0285916fd6f5cf092c8aa9231fd27839ddf1fb786dbac0fb0078.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4677f46ebfbb0285916fd6f5cf092c8aa9231fd27839ddf1fb786dbac0fb0078.exe
Resource
win10v2004-20220812-en
General
-
Target
4677f46ebfbb0285916fd6f5cf092c8aa9231fd27839ddf1fb786dbac0fb0078
-
Size
198KB
-
MD5
65370fbb4e25817900d897b1bc022550
-
SHA1
aa803e9e1ea6a2c8e2d1b066d162170b92850ef6
-
SHA256
4677f46ebfbb0285916fd6f5cf092c8aa9231fd27839ddf1fb786dbac0fb0078
-
SHA512
b991c803e613b294e549fd7ae85d7f63573a7c951f3ad8c0426726f205e4918cb0f701b300c0b97b941a592674145733fef73557515dd71f1abe27cfa8d6981c
-
SSDEEP
3072:lBI5ArKGCnhgU1XA+ArXjeaMoh6lgUaVwQ+/76bSSN+PS7VyoCeJ6ikQu26LOUp:lK5ArKjbAxXSaegUqGeGpBohMQK
Malware Config
Signatures
Files
-
4677f46ebfbb0285916fd6f5cf092c8aa9231fd27839ddf1fb786dbac0fb0078.exe windows x86
b85f7741a49f0e564ff0742d092b0400
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualFree
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
Sections
.text Size: 170KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ