Static task
static1
Behavioral task
behavioral1
Sample
4a768f0861e8004884d772055aff5c046b715be8fafe03e0b56588d22349eb9a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4a768f0861e8004884d772055aff5c046b715be8fafe03e0b56588d22349eb9a.exe
Resource
win10v2004-20220901-en
General
-
Target
4a768f0861e8004884d772055aff5c046b715be8fafe03e0b56588d22349eb9a
-
Size
96KB
-
MD5
04bdc1ef7b2a6ef59b5ebaa81aeba6a0
-
SHA1
0583c1fad37aab976738a02c72d7e9453ca5eac3
-
SHA256
4a768f0861e8004884d772055aff5c046b715be8fafe03e0b56588d22349eb9a
-
SHA512
760a586c25088b15db157c938a803d545c3be02c2bcbd34c55038e930e708bdbf17da52b71a92112596cbf6cd611dc464c5782a18469d9ca2ab1ff1f256631e4
-
SSDEEP
1536:5kS6iKstVhFx2QV04T6toSa0DHILgPRzsDpl1I70JQgBJNpMmSLoCgHB:5kS6iKstVhFx5Vp6toyDo8PZ43BJsmS6
Malware Config
Signatures
Files
-
4a768f0861e8004884d772055aff5c046b715be8fafe03e0b56588d22349eb9a.exe windows x86
916e9cadd13693fb4b1f37f1d4d19369
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
CloseHandle
WriteFile
GetModuleFileNameA
CreateFileA
ExitProcess
WaitForSingleObject
CreateMutexA
DeleteFileA
Sleep
ExpandEnvironmentStringsA
GetModuleHandleA
CreateProcessA
GetStringTypeW
GetStringTypeA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetLastError
SetFilePointer
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
FlushFileBuffers
advapi32
RegCloseKey
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
wininet
InternetGetConnectedState
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE