Static task
static1
Behavioral task
behavioral1
Sample
4b828c0b9cd5dbd188e156af0169a8262a9e706a036a7f980c006d204e830df2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4b828c0b9cd5dbd188e156af0169a8262a9e706a036a7f980c006d204e830df2.exe
Resource
win10v2004-20220901-en
General
-
Target
4b828c0b9cd5dbd188e156af0169a8262a9e706a036a7f980c006d204e830df2
-
Size
161KB
-
MD5
965dd7e029b10294b82ce4a4a599cfa0
-
SHA1
dfd3c7a7ab71e418577692aed991b0e491befca7
-
SHA256
4b828c0b9cd5dbd188e156af0169a8262a9e706a036a7f980c006d204e830df2
-
SHA512
48494a1da60930ca0cbc9f8900cdbd4da646669b2aac46a545f6262484de787ef27ff43e14c63d6522a8c546cea80fd01d8f7a27e20236dbb07f43e52ffdb0aa
-
SSDEEP
3072:d0y73VRaeuwhFqYD0kPH7ToHPyCrFT05/SMsVFNFwCkMU0wqlvLsK718:J3KxKq+0cPoHPykYZ8Jk74Q
Malware Config
Signatures
Files
-
4b828c0b9cd5dbd188e156af0169a8262a9e706a036a7f980c006d204e830df2.exe windows x86
cc838a8f06a94e08e405992ef435e520
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitThread
GetLastError
GetProcAddress
LoadLibraryA
RtlZeroMemory
CreateThread
lstrcpyA
WaitForSingleObject
OutputDebugStringA
ExitProcess
ntdll
_wcsnicmp
user32
TranslateMessage
GetMessageA
DispatchMessageW
wvsprintfA
comctl32
ord17
powrprof
IsPwrShutdownAllowed
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ