Static task
static1
Behavioral task
behavioral1
Sample
4414383368e48d24a6ac79ed8b3929b7f610e089612453a00145891aa1ab7ecf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4414383368e48d24a6ac79ed8b3929b7f610e089612453a00145891aa1ab7ecf.exe
Resource
win10v2004-20220812-en
General
-
Target
4414383368e48d24a6ac79ed8b3929b7f610e089612453a00145891aa1ab7ecf
-
Size
311KB
-
MD5
71c73618cbc9f4028e2eb58c7f42c210
-
SHA1
1af7b8dfa5308ca2d0094ddefd41a7e221996b92
-
SHA256
4414383368e48d24a6ac79ed8b3929b7f610e089612453a00145891aa1ab7ecf
-
SHA512
e8287ca02f299c90c830b8dec2b2b73e8929a65855d45d4d2f0d5f0258e00ee7fd6c6aa162620b8f74ad8945de660c19bdcfc71d393ce039d8db9313609b92c2
-
SSDEEP
6144:PRULJRlzz3liP8eBWxzHzwhpAZvcOU0aACzCbQjMUmWmi:POLJRlzz3CpwzHMhpGdWGb2MUf
Malware Config
Signatures
Files
-
4414383368e48d24a6ac79ed8b3929b7f610e089612453a00145891aa1ab7ecf.exe windows x86
458f0c14974a0795bbfe6213b0577497
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GlobalLock
GetPrivateProfileIntA
FindVolumeClose
CreateEventA
GetStdHandle
LoadLibraryA
GetVersionExA
GetStringTypeA
RemoveDirectoryA
CreateDirectoryW
GetPrivateProfileSectionA
GetFileAttributesW
CloseHandle
GetCurrentThread
GlobalFlags
VirtualProtectEx
DeviceIoControl
GetFileAttributesW
HeapFree
GetCurrentProcess
GetDriveTypeA
shell32
DragFinish
DragQueryFileA
DllUnregisterServer
ExtractIconA
DragAcceptFiles
SHGetSettings
DllUnregisterServer
SHFree
StrChrA
ShellAboutA
ShellMessageBoxA
SHGetMalloc
DuplicateIcon
ntmarta
AccConvertAclToAccess
AccConvertSDToAccess
AccGetExplicitEntries
AccFreeIndexArray
uxtheme
CloseThemeData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ