Static task
static1
Behavioral task
behavioral1
Sample
4f77c84d892d2774612cf1b8c90b75968c0eabe710b02bf0a89098915993c050.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4f77c84d892d2774612cf1b8c90b75968c0eabe710b02bf0a89098915993c050.exe
Resource
win10v2004-20220812-en
General
-
Target
4f77c84d892d2774612cf1b8c90b75968c0eabe710b02bf0a89098915993c050
-
Size
741KB
-
MD5
45d5f301f19e583951e4a553b1b89aa0
-
SHA1
5c8748579d63a3771546628bba99d152044faf0a
-
SHA256
4f77c84d892d2774612cf1b8c90b75968c0eabe710b02bf0a89098915993c050
-
SHA512
795914d4446e7529253136cdbbb1dcacc4a97bf6dc12584c78ce8b4e69f7d7589dcb646f00e2dba93894df9c081195da1b6b176dedc588aeb936361a9c168f4c
-
SSDEEP
12288:73gNvrvVXpdzyZ54LqW6VWPL5aaufxFUF3MEq7vZqPDQP3/H:73SjRTW7W6VUQLfoVc7cLQPvH
Malware Config
Signatures
Files
-
4f77c84d892d2774612cf1b8c90b75968c0eabe710b02bf0a89098915993c050.exe windows x86
56183d6d64a60bf1d3597a57717808a3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FlushFileBuffers
FormatMessageA
FreeLibrary
GetFileAttributesA
GetFileSize
GetFullPathNameA
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTempPathA
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryExA
MultiByteToWideChar
SetErrorMode
SetFilePointer
SetUnhandledExceptionFilter
Sleep
WideCharToMultiByte
WriteFile
msvcrt
_chmod
_close
_fdopen
_fstat
_getcwd
_getpid
_lseek
_mkdir
_mktemp
_open
_rmdir
_stat
_strdup
_umask
_unlink
_utime
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_access
_assert
_cexit
_errno
_exit
_filbuf
_filelengthi64
_findclose
_findfirst
_findnext
_flsbuf
_fullpath
_get_osfhandle
_iob
_onexit
_osver
_setmode
_stricmp
_strnicmp
abort
atexit
atof
atoi
bsearch
calloc
ctime
exit
fclose
fflush
fgetpos
fopen
fprintf
fputc
fread
free
fseek
fsetpos
ftell
fwrite
getenv
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
qsort
realloc
remove
rename
setlocale
signal
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtol
strtoul
time
vsprintf
wcslen
user32
CharLowerBuffA
Sections
.text Size: 559KB - Virtual size: 559KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 145KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 30KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE