Static task
static1
Behavioral task
behavioral1
Sample
4def1f86c6af529894ae4ba2a56747784e0bdc7f2f09261512c7d17800599ecb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4def1f86c6af529894ae4ba2a56747784e0bdc7f2f09261512c7d17800599ecb.exe
Resource
win10v2004-20220901-en
General
-
Target
4def1f86c6af529894ae4ba2a56747784e0bdc7f2f09261512c7d17800599ecb
-
Size
89KB
-
MD5
91fe5f1f878eb8cf7b84bff99b16a8d8
-
SHA1
c7224e9a71a303af4afa0b1fefb915142c65a401
-
SHA256
4def1f86c6af529894ae4ba2a56747784e0bdc7f2f09261512c7d17800599ecb
-
SHA512
a0283ebef0f7f4a0020e32e429f00207cf963e19d43991833a1bfcba424e12ad32b2d4e189ebfda84f78dc2d3bc548d2790059bdfa116bfb1198ca91b90048ba
-
SSDEEP
1536:75fq3TroEBA44a4DRaXsik4MvgttCzB0wH0Cj5wePRKKn00o2ek6H:75MkEq4BKssiRMvCCVXHqePRRn00oNkC
Malware Config
Signatures
Files
-
4def1f86c6af529894ae4ba2a56747784e0bdc7f2f09261512c7d17800599ecb.exe windows x86
77046b760e85742c8ea9bfa42f344c64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
ResumeThread
WriteProcessMemory
HeapValidate
GetCurrentThreadId
QueryPerformanceCounter
QueryPerformanceFrequency
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
GetStringTypeW
user32
DefWindowProcA
Sections
0 Size: 26KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 47KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 9KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE