Static task
static1
Behavioral task
behavioral1
Sample
4bda415ca586fdcc47e14f4be3228772e4c95723f432d946952b788bf7726ae2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4bda415ca586fdcc47e14f4be3228772e4c95723f432d946952b788bf7726ae2.exe
Resource
win10v2004-20220812-en
General
-
Target
4bda415ca586fdcc47e14f4be3228772e4c95723f432d946952b788bf7726ae2
-
Size
96KB
-
MD5
900a8fa98f1dde641977a0a1f0592067
-
SHA1
51dd40305f5e8541726efbef6e1a2cdedd86045c
-
SHA256
4bda415ca586fdcc47e14f4be3228772e4c95723f432d946952b788bf7726ae2
-
SHA512
86192bf48a4dff98425197b38ac7d6a461e4d0bfd6b3e2482965d96e18276451fb441bd7c1363977bc59dc50362ec205c6491d2137237e7ab49dd4f5b4012791
-
SSDEEP
1536:+XU2btcIESi+z3x/vhMYk5wU92t4IGxi84UpkzbGIpPS58JLQM:OUmtc/pwx/pMYkV2t4Iqi84UizSZ2JLP
Malware Config
Signatures
Files
-
4bda415ca586fdcc47e14f4be3228772e4c95723f432d946952b788bf7726ae2.exe windows x86
c509740cf0477051805fd8dd19c44d14
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
LoadLibraryA
GetProcAddress
LCMapStringA
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
LCMapStringW
GetStringTypeA
CreateProcessA
GetSystemDirectoryA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetACP
GetCPInfo
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetStringTypeW
user32
LoadCursorA
GetDlgItem
SetClassLongA
EndDialog
GetClientRect
FillRect
EndPaint
CheckDlgButton
DialogBoxParamA
BeginPaint
gdi32
SelectObject
DeleteObject
SetBkMode
CreateSolidBrush
comctl32
ord17
ord6
shlwapi
SHGetValueA
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE