Static task
static1
Behavioral task
behavioral1
Sample
4ebc03130a7fcb03a330e80972112162c0a6676704d1749a60f18ee71d78cbe9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4ebc03130a7fcb03a330e80972112162c0a6676704d1749a60f18ee71d78cbe9.exe
Resource
win10v2004-20220812-en
General
-
Target
4ebc03130a7fcb03a330e80972112162c0a6676704d1749a60f18ee71d78cbe9
-
Size
154KB
-
MD5
68aa46cd80c9dbe1f539794fae3c6dc0
-
SHA1
88833259ab3d1d5866cefe292779551e71b73d44
-
SHA256
4ebc03130a7fcb03a330e80972112162c0a6676704d1749a60f18ee71d78cbe9
-
SHA512
e98031544458dd6539d6620c935262d0a7426cf5b39ddd29514bd1826e186c9f7028682c53a0bf3a77bbb722ccff871f9752e38571ac994db13e388969018170
-
SSDEEP
3072:DPQgE5TzdU3KzBCwqcII56CLVYIGlPs9I7YLYarNhQShSlUUs1OXIaO4fEoD55:DPQgzgtPh56h4w+zNhxhKs7aO48oN5
Malware Config
Signatures
Files
-
4ebc03130a7fcb03a330e80972112162c0a6676704d1749a60f18ee71d78cbe9.exe windows x86
d944bff64605771e05803c0fc9ece3c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoSizeA
VerFindFileA
user32
CharNextW
GetCursor
GetActiveWindow
GetFocus
kernel32
LocalFree
VirtualAlloc
LoadResource
DeleteFileA
GetOEMCP
GetLocaleInfoA
GetLocalTime
WaitForSingleObject
GetProcAddress
LoadLibraryA
FreeResource
GetFileSize
GetUserDefaultLCID
EnterCriticalSection
GetSystemDefaultLangID
VirtualQuery
lstrlenA
ExitProcess
GetVersionExA
VirtualAllocEx
GetDiskFreeSpaceA
GetFileType
GetCurrentProcessId
GetModuleHandleA
shell32
DragQueryFileA
SHGetDesktopFolder
SHGetFileInfoA
SHGetFolderPathA
gdi32
GetRgnBox
SetPixel
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: 1024B - Virtual size: 693B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 126KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 458B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE