Static task
static1
Behavioral task
behavioral1
Sample
4850e981111ffaa26c4839b95344915f9b4ee302d9734b49ef7c403d267dc3b6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4850e981111ffaa26c4839b95344915f9b4ee302d9734b49ef7c403d267dc3b6.exe
Resource
win10v2004-20220812-en
General
-
Target
4850e981111ffaa26c4839b95344915f9b4ee302d9734b49ef7c403d267dc3b6
-
Size
241KB
-
MD5
0e7b921b6be77dc71a031231a29b37a0
-
SHA1
0f5fc9156f8fd53f2c2044775b5ec53b7615e742
-
SHA256
4850e981111ffaa26c4839b95344915f9b4ee302d9734b49ef7c403d267dc3b6
-
SHA512
d3f514a41e55e626b336e4212fee9ae687e686b5ad1f38f53016051a1f2d0fb949a71883eb420c0d3a1c8bb2f6ef876ea10c101fca6c24e9225c38c3dbef0f23
-
SSDEEP
6144:NlG5fueYMKcL9Lna51smcQzPcDQyT04DsGGPkA:NmfuJaa5ztcvTi7
Malware Config
Signatures
Files
-
4850e981111ffaa26c4839b95344915f9b4ee302d9734b49ef7c403d267dc3b6.exe windows x86
cf673f7fa827eacfe1d583cf3130dbd5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RaiseException
GlobalFree
GlobalAddAtomA
HeapCreate
lstrcat
GetStdHandle
GetProfileStringA
LoadResource
GlobalFindAtomA
VirtualAlloc
SetConsolePalette
CloseHandle
DeleteAtom
GlobalLock
GetOEMCP
LoadLibraryExA
EnterCriticalSection
GlobalUnlock
LocalFree
GetProcessHeap
SetCommBreak
user32
GetWindow
GetParent
DrawEdge
GetWindowTextLengthA
BeginPaint
GetFocus
GetForegroundWindow
ValidateRect
ReleaseDC
AlignRects
GetClassNameA
ShowWindow
EndPaint
IsIconic
GetActiveWindow
CloseWindow
GetDC
GetClassInfoExA
GetWindowTextA
wsock32
WSACleanup
WSAStartup
WSAGetLastError
WSAAsyncGetServByPort
WSASetBlockingHook
linkinfo
CreateLinkInfoA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 596KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ