Static task
static1
Behavioral task
behavioral1
Sample
4979e73dddb4eac5cc7f621e51f6884e3d56f902dbc6b9287326ecd467b6f169.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4979e73dddb4eac5cc7f621e51f6884e3d56f902dbc6b9287326ecd467b6f169.exe
Resource
win10v2004-20220901-en
General
-
Target
4979e73dddb4eac5cc7f621e51f6884e3d56f902dbc6b9287326ecd467b6f169
-
Size
394KB
-
MD5
90ff437755b9e38fb749af242d95b7f0
-
SHA1
f22d335b5f25b797d29cbe46a3ea145657d44504
-
SHA256
4979e73dddb4eac5cc7f621e51f6884e3d56f902dbc6b9287326ecd467b6f169
-
SHA512
ace48023c00579bce680a71e79964c881e5e3d710acaa6d0d080c2576404b31ee814e754740475fd158b2b6c943f05a36f4f90549db26e4214f35fb791659c67
-
SSDEEP
6144:kLvEBApuMkrc7mRnQzpCMstSRe4WnmI0zqFbYHSieZzHlwtdF+Nw5ViXQelKevd2:kLvXuMk47mVSQPCesdqcLgHlQFoRQS
Malware Config
Signatures
Files
-
4979e73dddb4eac5cc7f621e51f6884e3d56f902dbc6b9287326ecd467b6f169.exe windows x86
95b0d31789986882a237271cd1101d0e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateFileW
LeaveCriticalSection
GetFileAttributesW
CreateFileW
CreateDirectoryA
GetModuleFileNameA
GetVolumePathNameW
GlobalFlags
GetVersionExA
ResumeThread
IsValidLocale
GetCurrentThreadId
OpenEventW
InterlockedExchange
HeapDestroy
PulseEvent
GetModuleHandleA
GetTickCount
SetEvent
CreateMutexA
SetFilePointer
SuspendThread
VirtualProtect
AddAtomA
lstrlenA
user32
SetRect
DestroyMenu
GetWindowLongA
PeekMessageA
MessageBoxA
IsMenu
GetWindowLongA
DestroyIcon
SetFocus
wsprintfA
LoadCursorA
GetWindowTextA
DispatchMessageA
dplayx
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
advapi32
IsValidAcl
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 389KB - Virtual size: 924KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE