Static task
static1
Behavioral task
behavioral1
Sample
c4022c158d2ef48af334e5f1a101fd04d2bcf29cb2a36a682eb419480e2cc426.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c4022c158d2ef48af334e5f1a101fd04d2bcf29cb2a36a682eb419480e2cc426.exe
Resource
win10v2004-20220812-en
General
-
Target
c4022c158d2ef48af334e5f1a101fd04d2bcf29cb2a36a682eb419480e2cc426
-
Size
128KB
-
MD5
054b6fc2b0fc4354b82ac5966f75f9a3
-
SHA1
24373e5eaf06a7187218b544322259856471d888
-
SHA256
c4022c158d2ef48af334e5f1a101fd04d2bcf29cb2a36a682eb419480e2cc426
-
SHA512
92330edbc1246ef0d51e9f87c05c78137d52787e7c1d1b741899aaee6fbaf19237aed96382d10e9ce90fef1910939edc82e47dc08f4838b0e59164ada5511a2e
-
SSDEEP
3072:SFwCo0hsWSyF5b0PKZDGXtIpZtzORmAyFbnPzvyh:Gw3ClH0SZDdpuJyFbPzvyh
Malware Config
Signatures
Files
-
c4022c158d2ef48af334e5f1a101fd04d2bcf29cb2a36a682eb419480e2cc426.exe windows x86
483c25271ae1257ab53b10a3c6e7bb3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteTimerQueue
lstrcmpi
ConvertFiberToThread
lstrcmpiW
lstrlenW
SetSystemTimeAdjustment
EnumSystemCodePagesA
SetProcessAffinityMask
LocalHandle
WaitForDebugEvent
ConvertFiberToThread
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 114KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE