Static task
static1
Behavioral task
behavioral1
Sample
4acb044d0d52cadb27945a05594a7c9445ba89138c3da9697e8c511338eb4903.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4acb044d0d52cadb27945a05594a7c9445ba89138c3da9697e8c511338eb4903.exe
Resource
win10v2004-20220812-en
General
-
Target
4acb044d0d52cadb27945a05594a7c9445ba89138c3da9697e8c511338eb4903
-
Size
332KB
-
MD5
e11303c8ddae2c685a3ecc16005c993b
-
SHA1
2035f77e844f178a5c6787b5997c003375bdc04e
-
SHA256
4acb044d0d52cadb27945a05594a7c9445ba89138c3da9697e8c511338eb4903
-
SHA512
ea1f207edb8ac09db4ff8e03739dd1931f5f66a7c463f19f198b098760e47e1095c7c37b224d29ca3c8addcbda4f9b1804bcf695f1639fba73a30572e31b86a3
-
SSDEEP
6144:V6aBsLht0KugxFuE4TXqg0gRkEugON49:n07RYtTXq/gRkEu5G
Malware Config
Signatures
Files
-
4acb044d0d52cadb27945a05594a7c9445ba89138c3da9697e8c511338eb4903.exe windows x86
3e5432a8e3dc944ee1db4712a1148358
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentThreadId
GetModuleFileNameA
GetCommandLineA
IsDBCSLeadByte
LocalFree
lstrcatA
lstrlenA
lstrcpyA
FormatMessageA
FreeLibrary
GetProcAddress
LoadLibraryA
GetEnvironmentVariableA
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
lstrcmpiA
lstrcmpA
SetConsoleTitleA
GetVersionExA
SetEnvironmentVariableA
FindClose
FindFirstFileA
GetFullPathNameA
InterlockedIncrement
ExitProcess
GetLastError
CloseHandle
GetExitCodeThread
WaitForSingleObject
CreateThread
LocalAlloc
LoadResource
FindResourceExA
GetUserDefaultLangID
GetSystemDefaultLangID
SetLastError
lstrlenW
RtlUnwind
user32
CharNextA
DispatchMessageA
CharLowerA
GetMessageA
CharPrevA
PostThreadMessageA
LoadStringA
MessageBoxA
TranslateMessage
wvsprintfA
ole32
CoInitialize
CoRegisterClassObject
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CLSIDFromString
CoGetClassObject
CoUninitialize
oleaut32
SysFreeString
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PACK Size: 164KB - Virtual size: 420KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE