Static task
static1
Behavioral task
behavioral1
Sample
4983ba6ec9fd32d83b0f32257f0661719095ab1967684bf3cbd2f388c5e13dfc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4983ba6ec9fd32d83b0f32257f0661719095ab1967684bf3cbd2f388c5e13dfc.exe
Resource
win10v2004-20220812-en
General
-
Target
4983ba6ec9fd32d83b0f32257f0661719095ab1967684bf3cbd2f388c5e13dfc
-
Size
437KB
-
MD5
6a0673b5284c5fa421aa5d20e1c15370
-
SHA1
0a3b437a316171596e9883f8673a0afe1c614ee6
-
SHA256
4983ba6ec9fd32d83b0f32257f0661719095ab1967684bf3cbd2f388c5e13dfc
-
SHA512
7d1a3dc91324ecaf7622571f959c766c41716d34fed1342f44506c3e6eee3021371908ad16c5a1e399b5ff4635eca81a2be94788a4d1676df0b8e499967c2a34
-
SSDEEP
6144:eHD1ARnIG9Iy3NkAkpkm4QMYssg8I7SoqPqsbxdV1wlvpP7GKBCVOj:ej1ARnj9J3pxmFAy1oqyiLupTGK8I
Malware Config
Signatures
Files
-
4983ba6ec9fd32d83b0f32257f0661719095ab1967684bf3cbd2f388c5e13dfc.exe windows x86
6118ec27765abf8a20f6436ebc27ec0e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoQueryAuthenticationServices
CoReleaseServerProcess
ntdll
KiFastSystemCall
user32
SetUserObjectInformationA
GetCaretBlinkTime
GetMessageTime
kernel32
GetCurrentThreadId
Sections
.text Size: 430KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE