Static task
static1
Behavioral task
behavioral1
Sample
4df0bb497059b1b3a207b3cb0ad74d5dba989aef1f97c2ffcffc1410d8a5cf9c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4df0bb497059b1b3a207b3cb0ad74d5dba989aef1f97c2ffcffc1410d8a5cf9c.exe
Resource
win10v2004-20220812-en
General
-
Target
4df0bb497059b1b3a207b3cb0ad74d5dba989aef1f97c2ffcffc1410d8a5cf9c
-
Size
68KB
-
MD5
81a866b4f2f4dfd422acfbccda464840
-
SHA1
4a9273cf4f79778baab59f0d228362b01237c90d
-
SHA256
4df0bb497059b1b3a207b3cb0ad74d5dba989aef1f97c2ffcffc1410d8a5cf9c
-
SHA512
985fd79b4ecb3417fd0c47c16e2fb814a048a6c6e91cbdaa4d02902857aff11504116b34481e0b1c75f42ad72f32d1c5a3f252698f1695105fc2961877aa4092
-
SSDEEP
768:3U8IRsymV6tjkJS1UbaBNuZ9ypL0vzJDsOq2YAppCP:3UVRsfkpqQwrJgOqHH
Malware Config
Signatures
Files
-
4df0bb497059b1b3a207b3cb0ad74d5dba989aef1f97c2ffcffc1410d8a5cf9c.exe windows x86
f002d20ad28f4c4db5d81d9d601d8a8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dbnmpntw
ConnectionRead
ConnectionWrite
ConnectionVer
kernel32
TlsGetValue
GetDateFormatW
SetCurrentDirectoryA
ExpandEnvironmentStringsA
WriteProcessMemory
HeapCreate
SystemTimeToFileTime
GetDiskFreeSpaceA
CreateNamedPipeW
SleepEx
GetTimeFormatA
GetNumberFormatA
GetProcessHeap
GetFullPathNameA
LoadLibraryA
GetAtomNameA
CompareStringA
GetPrivateProfileIntA
InterlockedExchange
CreateDirectoryA
shlwapi
PathCompactPathA
PathCombineA
UrlIsOpaqueA
UrlGetPartA
UrlHashA
UrlGetLocationA
UrlCombineA
PathCommonPrefixA
UrlIsA
UrlCanonicalizeA
themeui
DllCanUnloadNow
DllGetClassObject
DllInstall
DllCanUnloadNow
DllGetClassObject
user32
GetMessageA
IsZoomed
LoadImageW
CharToOemA
PeekMessageA
DispatchMessageA
SetFocus
wsprintfA
IsWindow
GetCaretPos
GetWindowLongA
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ