Static task
static1
Behavioral task
behavioral1
Sample
4473090bcc0553bfa5604d4005237b1b7b6bd7d1fb793080ee5731a491a8c77e.exe
Resource
win7-20220812-en
General
-
Target
4473090bcc0553bfa5604d4005237b1b7b6bd7d1fb793080ee5731a491a8c77e
-
Size
185KB
-
MD5
66247b625f8f72ed55f28edb14a6b070
-
SHA1
8a3f537d83e2daa5e61fc1313a422dfdb1a7bd4a
-
SHA256
4473090bcc0553bfa5604d4005237b1b7b6bd7d1fb793080ee5731a491a8c77e
-
SHA512
0fbb8b0dd8644164e28a38757565cef8b78453ed1dc17f20f01c2ac0ffefb4dc2f954bba160095b185b4f73b5b0bc829a2f7622b836a64e512f732fa24a092c4
-
SSDEEP
3072:lQ3wniwizBtpTGH2BBUSXTjWqRh4H4Zq26U2Yus11Hh5:lEwniwePjaq32YuAHh5
Malware Config
Signatures
Files
-
4473090bcc0553bfa5604d4005237b1b7b6bd7d1fb793080ee5731a491a8c77e.exe windows x86
38b9671a9200a096ebc7ce078fa2b4f9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualLock
VirtualQuery
CreateFileW
ReadFile
lstrlenW
lstrcmpiW
OpenEventW
SetEvent
GetModuleHandleW
LoadLibraryExW
GetProcAddress
GetSystemTimeAsFileTime
HeapAlloc
LoadLibraryW
InterlockedIncrement
InterlockedDecrement
HeapFree
GetProcessTimes
HeapSetInformation
SetDllDirectoryW
GetCommandLineW
TerminateProcess
GetLastError
FreeLibrary
GetCurrentProcessId
SetLastError
GetModuleFileNameW
CloseHandle
LocalFree
GetSystemDirectoryW
LocalAlloc
SetProcessWorkingSetSize
GetProcessWorkingSetSize
VirtualFree
VirtualAlloc
GetCurrentProcess
GetProcessHeap
GetVersionExW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
advapi32
RegQueryValueExW
RegOpenKeyExW
EnableTrace
StartTraceW
TraceEvent
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegCloseKey
shell32
SHGetFolderPathW
CommandLineToArgvW
shlwapi
SHGetValueW
PathFindFileNameW
StrStrW
PathCombineW
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE