Static task
static1
Behavioral task
behavioral1
Sample
4cec61d2e3917569260426c8a989903831b04a3c449fdce7bff0a506067bf90b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4cec61d2e3917569260426c8a989903831b04a3c449fdce7bff0a506067bf90b.exe
Resource
win10v2004-20220812-en
General
-
Target
4cec61d2e3917569260426c8a989903831b04a3c449fdce7bff0a506067bf90b
-
Size
35KB
-
MD5
81454dd726e04d211d87282504cf6e70
-
SHA1
1a608cbcbe6818f2e9b32d3e0a9742e77695cc7c
-
SHA256
4cec61d2e3917569260426c8a989903831b04a3c449fdce7bff0a506067bf90b
-
SHA512
ba266e27b03caebbdfba26236a6ab1df3e9e639f03258db6770132743ef272bd9ca13830d9147ac2625cfcf5499d4a68db200b5ba330d96a4918e490ee2e1928
-
SSDEEP
768:E/W/osaj85RjtG+mBCMI+vwaajW2R6rw/5639u:gW/osaj85RjtG+sDajWW6rf9
Malware Config
Signatures
Files
-
4cec61d2e3917569260426c8a989903831b04a3c449fdce7bff0a506067bf90b.exe windows x86
10af540268f89cbfb9f78bf570900456
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLocaleInfoW
CreateDirectoryW
GetCurrentProcess
LocalLock
RemoveDirectoryW
GetFileAttributesA
FindResourceW
MapViewOfFile
GetModuleHandleA
GetStringTypeA
SetPriorityClass
HeapFree
TlsGetValue
GetExitCodeThread
FindClose
SetLastError
VirtualProtect
IsValidCodePage
SuspendThread
GetFileAttributesA
GetTickCount
user32
DefDlgProcA
PeekMessageW
LoadImageW
GetWindowLongW
SetCursor
SetFocus
LoadCursorA
PostMessageW
IsWindow
IsDialogMessageA
wsprintfW
DispatchMessageA
GetWindowTextW
msctf
TF_InitSystem
DllUnregisterServer
DllCanUnloadNow
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE