Static task
static1
Behavioral task
behavioral1
Sample
4bd7903a2293caba48863ef1cbff8f108a3fa64138bf83a67812f110a5e22bbd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4bd7903a2293caba48863ef1cbff8f108a3fa64138bf83a67812f110a5e22bbd.exe
Resource
win10v2004-20220901-en
General
-
Target
4bd7903a2293caba48863ef1cbff8f108a3fa64138bf83a67812f110a5e22bbd
-
Size
317KB
-
MD5
09911e47a1fcef1c12597f4302f9c0d9
-
SHA1
dc056a22b848745704bd9ff25e603af89cddb766
-
SHA256
4bd7903a2293caba48863ef1cbff8f108a3fa64138bf83a67812f110a5e22bbd
-
SHA512
55019affe5af6e9752d79a82df57fec2878fc5a3e09318fe3779c2c35c37d9177b2c388f96246fc0517a16f68561902800d3b9fd5f1473c3a6db76a9bf9856e1
-
SSDEEP
6144:JVsEcSxl/j0aJCq64QbaijVtrkMRxamkfBfV+4We85Rx/Wz:bsEPxlb84Qbxj7rBRDkptWtx+z
Malware Config
Signatures
Files
-
4bd7903a2293caba48863ef1cbff8f108a3fa64138bf83a67812f110a5e22bbd.exe windows x86
43f6bebe76eb69d487643293ce960502
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CloseHandle
CreateFileA
ExitProcess
LCMapStringA
LoadLibraryA
user32
wsprintfA
CreateWindowExA
SetWindowLongA
CloseWindow
CharLowerBuffA
advapi32
RegCreateKeyA
RegDeleteValueA
RegQueryValueA
RegCloseKey
RegEnumValueA
RegSetValueA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
Sections
.text Size: 210KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ