Static task
static1
Behavioral task
behavioral1
Sample
4e178ffec2275d834ed7489bb9178c477f6904a6d08d1d4d6256bbe64e1641be.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4e178ffec2275d834ed7489bb9178c477f6904a6d08d1d4d6256bbe64e1641be.exe
Resource
win10v2004-20220812-en
General
-
Target
4e178ffec2275d834ed7489bb9178c477f6904a6d08d1d4d6256bbe64e1641be
-
Size
333KB
-
MD5
a2304342ab5ec8034481c1119c41f630
-
SHA1
17f191aa46ba4e7ddfd0762f07381aab359b29d7
-
SHA256
4e178ffec2275d834ed7489bb9178c477f6904a6d08d1d4d6256bbe64e1641be
-
SHA512
b4282af81d590688bc52e75563e7b8069aa352a02f6fb76de3a06c61992a28ae21237447d53706cac5f8efaec0c262cd8963b21fa30491c31fd769a0df6eeabb
-
SSDEEP
6144:9fHL80H0SGUy70y8i2s16q0eSkUmw0gHHWTsooIbCGWtUJVEJCRSEeTG:tJHI70xiz68PgIUIb5FVEJySE4G
Malware Config
Signatures
Files
-
4e178ffec2275d834ed7489bb9178c477f6904a6d08d1d4d6256bbe64e1641be.exe windows x86
9f4a28f66cfd4ac5b4bedd49d361ad73
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
GetTimeFormatA
WideCharToMultiByte
GetNumberFormatA
IsBadWritePtr
IsBadStringPtrA
ReleaseSemaphore
WaitForSingleObject
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
GlobalHandle
LocalFlags
GetSystemDefaultLCID
GlobalUnlock
GetProcAddress
LocalFree
VirtualAllocEx
CreateSemaphoreA
LocalLock
OpenSemaphoreA
LocalHandle
LocalReAlloc
GetModuleHandleA
GetStartupInfoA
netapi32
NetGroupDelUser
NetConfigGetAll
NetAuditRead
NetErrorLogRead
NetGetAnyDCName
NetConnectionEnum
NetAuditClear
NetConfigGet
NetGetJoinInformation
NetErrorLogWrite
msvcrt
__getmainargs
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_exit
_XcptFilter
exit
_acmdln
__setusermatherr
_initterm
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 311KB - Virtual size: 410KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ