Static task
static1
Behavioral task
behavioral1
Sample
c4ddf8db1b7fd0bcaae07004790a5a1c58d5df2c347a1f560ef9776fdae4dd3e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c4ddf8db1b7fd0bcaae07004790a5a1c58d5df2c347a1f560ef9776fdae4dd3e.exe
Resource
win10v2004-20220901-en
General
-
Target
c4ddf8db1b7fd0bcaae07004790a5a1c58d5df2c347a1f560ef9776fdae4dd3e
-
Size
116KB
-
MD5
a2c655b679afde9ae86d318f74d05350
-
SHA1
a26bb85558d7a013388a2eb47485a08c9ca65e76
-
SHA256
c4ddf8db1b7fd0bcaae07004790a5a1c58d5df2c347a1f560ef9776fdae4dd3e
-
SHA512
b16dd88778a055f4b96a4e423e65da47c0cb38da0aa7ffa6b8a952fa4aa42209fea74e8deef7675c48e35d1fafbcecd24bd743361e886e215a50daf45e0a541b
-
SSDEEP
1536:svjymsyClaXvloVM7pGi8+3mz0ktsl3kus/Mt+VTRgb8jD/:K9KqdoVM7T8cktK3gMt+Vtg4jD/
Malware Config
Signatures
Files
-
c4ddf8db1b7fd0bcaae07004790a5a1c58d5df2c347a1f560ef9776fdae4dd3e.exe windows x86
167d92738d30d94b31fbc1cc4775dcba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetHandleCount
CloseHandle
WaitForSingleObject
CreateProcessA
GetStartupInfoA
GetFileType
SetEndOfFile
LCMapStringW
LCMapStringA
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
ReadFile
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
DeleteFileA
GetStdHandle
LoadLibraryA
SetFilePointer
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
FlushFileBuffers
SetUnhandledExceptionFilter
CreateFileA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
ltfil12n
ord189
ord190
ord111
ltkrn12n
ord197
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE