Static task
static1
Behavioral task
behavioral1
Sample
4c249fd0e3071c602fb32ad0035bf3756c11b733b09e8e03703117842e71fd08.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4c249fd0e3071c602fb32ad0035bf3756c11b733b09e8e03703117842e71fd08.exe
Resource
win10v2004-20220812-en
General
-
Target
4c249fd0e3071c602fb32ad0035bf3756c11b733b09e8e03703117842e71fd08
-
Size
10KB
-
MD5
471e398309fd0d70fddc1e634fce6d10
-
SHA1
d6e738c6258680893841af321a28b9abcde938b8
-
SHA256
4c249fd0e3071c602fb32ad0035bf3756c11b733b09e8e03703117842e71fd08
-
SHA512
2f1563175927cc929d23681fd7b9dd51b3905d47d67749ce913f99180c0b3ca59888633599d7729844142d04e4fb461f7af70bfc1a92778fa52b772000b54be3
-
SSDEEP
192:0CYuBthKuRnoe+Mn9p5QWE8ibWkVERDBq72lI:0PuBthToe+2OWE8ibWHQ7B
Malware Config
Signatures
Files
-
4c249fd0e3071c602fb32ad0035bf3756c11b733b09e8e03703117842e71fd08.exe windows x86
a27d83a9da2c352a78f464a9a6e77955
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__getmainargs
__initenv
_cexit
_XcptFilter
_exit
_c_exit
exit
tolower
_initterm
wcslen
??2@YAPAXI@Z
??3@YAXPAX@Z
kernel32
FreeLibrary
LoadLibraryExA
WriteFile
GetModuleHandleA
GlobalFree
LocalFree
GetLastError
lstrlenA
MultiByteToWideChar
GetStdHandle
GetFileType
GetConsoleMode
WriteConsoleW
GetConsoleOutputCP
WideCharToMultiByte
FormatMessageW
wininet
InternetQueryOptionA
winhttp
WinHttpGetDefaultProxyConfiguration
WinHttpSetDefaultProxyConfiguration
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 32B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE