Static task
static1
Behavioral task
behavioral1
Sample
c4427c0a93d6497fe6e3ecc8c17789fbdd8878d965eb17bc95dbf2ac72bbcc49.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c4427c0a93d6497fe6e3ecc8c17789fbdd8878d965eb17bc95dbf2ac72bbcc49.exe
Resource
win10v2004-20220812-en
General
-
Target
c4427c0a93d6497fe6e3ecc8c17789fbdd8878d965eb17bc95dbf2ac72bbcc49
-
Size
53KB
-
MD5
6e0815e86cb61a1c9ebaf3fc1281e970
-
SHA1
736809f7600ec24c820c687c8981b43de654a5ad
-
SHA256
c4427c0a93d6497fe6e3ecc8c17789fbdd8878d965eb17bc95dbf2ac72bbcc49
-
SHA512
9ed3cf487f6b5c57e4d234d0fc80219bb44d4e52f232a0f6f8dd3ca8de2ede548abb3b247e6c56d48847779a0841971ed2ebcc774e848343831ecb1a62ae2258
-
SSDEEP
768:oih9hkn/u/bV3TBFcH7MwZGQhrbp930NScD05s2l9QRmTQOl3S81B+hC1epielHc:Bhb9YH7murdkY5s2l58AnBEpieZmVr
Malware Config
Signatures
Files
-
c4427c0a93d6497fe6e3ecc8c17789fbdd8878d965eb17bc95dbf2ac72bbcc49.exe windows x86
49f358585610ebab9a1445c300f41320
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetDriveTypeW
HeapDestroy
HeapCreate
GetConsoleTitleA
DeleteFileA
GetStartupInfoA
GlobalFlags
CloseHandle
GetCommandLineA
GetCommandLineA
GetEnvironmentVariableA
lstrlenA
EnumResourceTypesA
SetLastError
GetModuleHandleA
GetTimeFormatW
CreateEventW
WriteConsoleA
GetFileAttributesW
advapi32
IsValidAcl
IsValidSid
IsValidSid
RegQueryValueW
RegEnumKeyA
RegDeleteValueA
IsValidSid
RegCreateKeyExW
IsValidSecurityDescriptor
IsValidSid
InitializeSid
IsValidSid
CreateProcessAsUserW
cnvfat
ConvertFAT
ConvertFAT
ConvertFAT
ConvertFAT
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE