Static task
static1
Behavioral task
behavioral1
Sample
4ba31ea54684054f47a825a24730073ade53583aa03f40d52f3414ba4d517330.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4ba31ea54684054f47a825a24730073ade53583aa03f40d52f3414ba4d517330.exe
Resource
win10v2004-20220812-en
General
-
Target
4ba31ea54684054f47a825a24730073ade53583aa03f40d52f3414ba4d517330
-
Size
178KB
-
MD5
908f519a60e2ee98dd5b772322523fe0
-
SHA1
619621f1a37512ca6b8b05fe6f100d84c192db57
-
SHA256
4ba31ea54684054f47a825a24730073ade53583aa03f40d52f3414ba4d517330
-
SHA512
fc7b96952f234330ab4e4b6b11e238dc9c5faa078c79e353dc47b5574ce13ce91059df1c156293228b61c366a6ff79bbd54b981aedc5f72a8cdf3a2d51578144
-
SSDEEP
3072:5KjX7uZXDEDEux+DalrIMVKVl7eRj7l6X2jygMKhKLQbf6PFxtW75zg5nbO4llk7:Y+2BlrIHtIcXEylKhqQmdrOSlkxSwX
Malware Config
Signatures
Files
-
4ba31ea54684054f47a825a24730073ade53583aa03f40d52f3414ba4d517330.exe windows x86
cb46c68db015d75b2b0d661d2db98be0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CryptBinaryToStringW
user32
LoadAcceleratorsA
LoadCursorA
LoadIconA
LoadStringA
RegisterClassA
SendMessageA
PostMessageA
ole32
CoInitialize
CoUninitialize
OleInitialize
OleUninitialize
kernel32
CloseHandle
CreateFileA
DeleteFileA
ExpandEnvironmentStringsA
FindFirstFileA
FindNextFileA
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileAttributesA
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
LoadLibraryA
LoadLibraryExA
QueryPerformanceCounter
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
lstrlenA
CreateDirectoryA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
Sections
AUTO Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 126KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ