Static task
static1
Behavioral task
behavioral1
Sample
f4d1c2ed59a6912122b707eadc1036e9e2cb27b9c1afbaf853467d7d6c7c9235.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f4d1c2ed59a6912122b707eadc1036e9e2cb27b9c1afbaf853467d7d6c7c9235.exe
Resource
win10v2004-20220812-en
General
-
Target
f4d1c2ed59a6912122b707eadc1036e9e2cb27b9c1afbaf853467d7d6c7c9235
-
Size
989KB
-
MD5
6d8ccc56c57fe563468c4c22473ccd40
-
SHA1
71b4cc1a372c469d37ad4766abdd239c4041c045
-
SHA256
f4d1c2ed59a6912122b707eadc1036e9e2cb27b9c1afbaf853467d7d6c7c9235
-
SHA512
af6d72298330332486f48ca4bb8afec2df5b1acdf106e354feb023a6c44193afe46c47938ca6b33390a65e14c777495eb7696e1068cf1385c4c74a4ec633112d
-
SSDEEP
24576:XUvFjLmGxEyjF8lVhkUMpPR1KqwCDZOhkBDaQEfsE/a0mmX67:YhmGFelLkUMpRB2r/RmmX67
Malware Config
Signatures
Files
-
f4d1c2ed59a6912122b707eadc1036e9e2cb27b9c1afbaf853467d7d6c7c9235.exe windows x86
d8e78536ea77f218abc1cd3e68e96610
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
VarCyFromR8
user32
GetDialogBaseUnits
DdeQueryStringA
advapi32
LsaQueryInfoTrustedDomain
ntdll
NtFreeUserPhysicalPages
kernel32
GetSystemDefaultLCID
Sections
.text Size: 986KB - Virtual size: 988KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE