Static task
static1
Behavioral task
behavioral1
Sample
41a486b15af71ba1d8fc2874cc5609f88b0e6cddc9d51b34f8415c829548ff7c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
41a486b15af71ba1d8fc2874cc5609f88b0e6cddc9d51b34f8415c829548ff7c.exe
Resource
win10v2004-20220812-en
General
-
Target
41a486b15af71ba1d8fc2874cc5609f88b0e6cddc9d51b34f8415c829548ff7c
-
Size
44KB
-
MD5
f66dd9028a7ed14c36a9042a318043a2
-
SHA1
f5d0a38fa4eaa47747e87f1f32767899843d72b9
-
SHA256
41a486b15af71ba1d8fc2874cc5609f88b0e6cddc9d51b34f8415c829548ff7c
-
SHA512
319ae70ab040c6bf6742ef349902e34e5c64095db9dc06c38ab4b706a51e612ee27866e50662f776f374a0ffe39e761c65879431cef4c0fc553c84f252774500
-
SSDEEP
768:4Cma1JveozXPgMJlbyMBOY5JvW5JxVIAA3YjAhD4:4Cm2JWegMJlbtBOwJvW5JvIAA3kAhD4
Malware Config
Signatures
Files
-
41a486b15af71ba1d8fc2874cc5609f88b0e6cddc9d51b34f8415c829548ff7c.exe windows x86
9ec394606677b993a75d63be1c995b91
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
olecli32
DefCreateInvisible
DefCreateLinkFromClip
DefCreateLinkFromFile
DefCreateInvisible
DefCreateLinkFromClip
DefCreateLinkFromFile
DefCreateInvisible
DefCreateLinkFromClip
DefCreateLinkFromFile
DefCreateInvisible
DefCreateLinkFromClip
DefCreateLinkFromFile
DefCreateInvisible
DefCreateLinkFromClip
DefCreateLinkFromFile
lz32
LZRead
LZOpenFileA
LZOpenFileW
LZStart
msdmo
DMORegister
mscat32
CryptCATCDFClose
CryptCATGetAttrInfo
CryptCATGetAttrInfo
CryptCATGetAttrInfo
kernel32
GetSystemDirectoryA
CreateFileA
TerminateThread
ReadFileEx
GetTickCount
GetTickCount
ReadConsoleW
devmgr
DeviceProblemTextA
esent
JetBeginSession
Sections
tex Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data3 Size: 4KB - Virtual size: 69KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
plk Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
neo Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE