Static task
static1
Behavioral task
behavioral1
Sample
447494b8f790528c34d6192238615c6035ac137a1fbcd412d4261cd5c9c90c6a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
447494b8f790528c34d6192238615c6035ac137a1fbcd412d4261cd5c9c90c6a.exe
Resource
win10v2004-20220812-en
General
-
Target
447494b8f790528c34d6192238615c6035ac137a1fbcd412d4261cd5c9c90c6a
-
Size
816KB
-
MD5
c719a96824b91fd7792c6b156a652186
-
SHA1
5780e50f711a3bf84a5844069e546cf008c67470
-
SHA256
447494b8f790528c34d6192238615c6035ac137a1fbcd412d4261cd5c9c90c6a
-
SHA512
70445f184c25446a80941bc63ca4cc615954dca02fe5e3c2d7f8c43837d9c18c1186adc2b8e878725b6c310127594446d20095c4b48bb1f4605db7ef03b3ad4e
-
SSDEEP
24576:YzLziRdEGl2Wut1xvyLZ3uI0QU7+J+BemryQIv:Ynz8pS1ly93u/6Ery9
Malware Config
Signatures
Files
-
447494b8f790528c34d6192238615c6035ac137a1fbcd412d4261cd5c9c90c6a.exe windows x86
ea5eb3980a33526d64ad7e730ff771b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetCurrentDirectoryW
MoveFileA
GetVolumeInformationW
GetLastError
GetFileType
CreateSemaphoreA
LoadLibraryA
GetConsoleTitleA
GetLastError
GetLastError
GetLastError
lstrlenW
GetLastError
GetLastError
CreateMutexA
GetLastError
objsel
DllRegisterServer
DllUnregisterServer
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.Data Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE