Static task
static1
Behavioral task
behavioral1
Sample
4d793d6b29b4da7e71e9863cef08f04aad180757b3685786eaaa0212966d7491.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4d793d6b29b4da7e71e9863cef08f04aad180757b3685786eaaa0212966d7491.exe
Resource
win10v2004-20220812-en
General
-
Target
4d793d6b29b4da7e71e9863cef08f04aad180757b3685786eaaa0212966d7491
-
Size
301KB
-
MD5
0717a88f30be8d7d2ea4355c9871525b
-
SHA1
a9cce5eb567b5ed9212ecc9c662d483fd959ae95
-
SHA256
4d793d6b29b4da7e71e9863cef08f04aad180757b3685786eaaa0212966d7491
-
SHA512
c859c9f0442290fa60644e27f0b25683724688f67ff2d97e1b36ce19aa04b1a38bec8680f79e0f508b824b228bad7d9de8817f61e281e96a0843c06ca87709f4
-
SSDEEP
6144:ThFR0XYjNyhhv0yytL8XaszVIML7uezJDWy1VK7ni:1FRXyUyytQaeRDc7i
Malware Config
Signatures
Files
-
4d793d6b29b4da7e71e9863cef08f04aad180757b3685786eaaa0212966d7491.exe windows x86
8987852f5148f09b5c268adef24a0ebd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ReadFile
GetSystemInfo
user32
LoadIconA
LoadCursorA
advapi32
RegOpenKeyA
msvcrt
_XcptFilter
__getmainargs
__lconv_init
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_cexit
_controlfp
_except_handler3
_exit
_ftol
_initterm
_mbsinc
_mbslen
_mbsrchr
_stricmp
_strnicmp
exit
setlocale
strchr
strncpy
strtoul
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 834B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 276KB - Virtual size: 275KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ