Static task
static1
Behavioral task
behavioral1
Sample
c434a94fabd7460dafb76bc65ff9f86e3657cffdf37515e8df1eb8ec7398a4c2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c434a94fabd7460dafb76bc65ff9f86e3657cffdf37515e8df1eb8ec7398a4c2.exe
Resource
win10v2004-20220901-en
General
-
Target
c434a94fabd7460dafb76bc65ff9f86e3657cffdf37515e8df1eb8ec7398a4c2
-
Size
444KB
-
MD5
141cdd9461ef2850affb613433c386b0
-
SHA1
289c85b6761e7e8e2e6468df492e9f8989ae007a
-
SHA256
c434a94fabd7460dafb76bc65ff9f86e3657cffdf37515e8df1eb8ec7398a4c2
-
SHA512
257457f5f1039fd92934c572584237f942683cb9888d267a656f749a4b1bfe86bb62f04979a6efe551acdf2c2bb6f960e2c7cd378bc8ae6182dafaa0058e0217
-
SSDEEP
12288:IMeCP3en5qgwROoOom5Cveta1ZznEtn6P:teCP652RsomKOaLLKnu
Malware Config
Signatures
Files
-
c434a94fabd7460dafb76bc65ff9f86e3657cffdf37515e8df1eb8ec7398a4c2.exe windows x86
064b63a7b3f3887732c62dfb8a6c9e1e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlAppendPathElement
user32
GetCursor
IsWinEventHookInstalled
kernel32
GetUserDefaultUILanguage
Sections
.text Size: 437KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 221B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE