Static task
static1
Behavioral task
behavioral1
Sample
a4c122358358a02f543ca1d4af7e9f89e8e61b70bbc9958d434639fac4417ede.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a4c122358358a02f543ca1d4af7e9f89e8e61b70bbc9958d434639fac4417ede.exe
Resource
win10v2004-20220812-en
General
-
Target
a4c122358358a02f543ca1d4af7e9f89e8e61b70bbc9958d434639fac4417ede
-
Size
431KB
-
MD5
673125a8e1c7735ccb0a9023650d4580
-
SHA1
801678aee7e9f8117e021e3bde184ac1d9f85e92
-
SHA256
a4c122358358a02f543ca1d4af7e9f89e8e61b70bbc9958d434639fac4417ede
-
SHA512
7f06bacadc8f0e8429e9ace3576ef496f97283c44c9b6fe4231156e7ab492b56e1f463635ae97031070cc2bcccb0defe3149779bc2490abd17d2f15e1318e581
-
SSDEEP
12288:8ELiSeoXwhE3YJKB/WKog9LMMQF2Ng2PiW6ULGIe1fBiV:FwsfuPgxg2e2gBY
Malware Config
Signatures
Files
-
a4c122358358a02f543ca1d4af7e9f89e8e61b70bbc9958d434639fac4417ede.exe windows x86
9115c686672f3793c603857ee4cf94fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
DbgPrintEx
NtTerminateThread
NtLoadKey2
advapi32
ElfChangeNotify
user32
GetKBCodePage
GetMessageTime
kernel32
GetCommandLineA
Sections
.text Size: 429KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 237B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE