Static task
static1
Behavioral task
behavioral1
Sample
594917266457c5cec621c4f02a1ee764dc2bb03c2bd565fdd3a36e56badd273a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
594917266457c5cec621c4f02a1ee764dc2bb03c2bd565fdd3a36e56badd273a.exe
Resource
win10v2004-20220812-en
General
-
Target
594917266457c5cec621c4f02a1ee764dc2bb03c2bd565fdd3a36e56badd273a
-
Size
996KB
-
MD5
48d2c095d7c277a0f8bbcd2a1fa90a02
-
SHA1
942039641f10aefc68fe078a24ac19586698f695
-
SHA256
594917266457c5cec621c4f02a1ee764dc2bb03c2bd565fdd3a36e56badd273a
-
SHA512
192fe81ee7d2d3ad5739e0a050b3f111c1f6e2068a16d2c7e3cf9b46f89d7b8a8bff2b67b79d71ae39d8c53cb4ed11bf13c5f14f5fa46e89882e43a0b8d9ba5a
-
SSDEEP
12288:m+sarTI8MS4m3KL9Ib0zWZMp6YAiAvVfOaVAqeS:jsarm26KmWXiAtOad
Malware Config
Signatures
Files
-
594917266457c5cec621c4f02a1ee764dc2bb03c2bd565fdd3a36e56badd273a.exe windows x86
21e5fd12c479e615826c38cbd5fa7b35
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
HeapDestroy
OpenEventW
FindResourceExW
FindResourceW
SetLastError
HeapAlloc
GetProcessHeap
HeapFree
GetTempPathW
IsBadReadPtr
IsBadWritePtr
rpcrt4
RpcStringBindingParseW
RpcBindingVectorFree
RpcBindingToStringBindingW
RpcEpUnregister
RpcEpRegisterW
RpcServerListen
RpcServerRegisterIfEx
RpcServerRegisterAuthInfoW
RpcServerInqDefaultPrincNameW
RpcImpersonateClient
UuidCreate
UuidToStringW
RpcMgmtStopServerListening
RpcAsyncAbortCall
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 960KB - Virtual size: 958KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 1B
IMAGE_SCN_MEM_WRITE
.data2 Size: 4KB - Virtual size: 1B
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ