Static task
static1
Behavioral task
behavioral1
Sample
c4ee007dcd125f8d9d113560807cd2d09c017a3c277261dbc1a8d4e9540121ff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c4ee007dcd125f8d9d113560807cd2d09c017a3c277261dbc1a8d4e9540121ff.exe
Resource
win10v2004-20220812-en
General
-
Target
c4ee007dcd125f8d9d113560807cd2d09c017a3c277261dbc1a8d4e9540121ff
-
Size
425KB
-
MD5
a3419db5c18e37160e7901f7025282b0
-
SHA1
cc4964c5e30b772f6651ed9095b13a7f9d4c2253
-
SHA256
c4ee007dcd125f8d9d113560807cd2d09c017a3c277261dbc1a8d4e9540121ff
-
SHA512
fa4fb25af527d1527d52acc1f79f18cdde758c3966213ee0ddf170ad7905479e873a2d4ef0c06aea1d63ab3af284731b6ded200e835429c8629fe63f2ba3d12b
-
SSDEEP
12288:KvvOXAUZHcvb+rttocPaMqvLE+yVkhGf4F8U6e9Ki:KvHUNoYaM3+yVvPU6e9Ki
Malware Config
Signatures
Files
-
c4ee007dcd125f8d9d113560807cd2d09c017a3c277261dbc1a8d4e9540121ff.exe windows x86
a4e68c7de81c3466d7595bbaa2b33b8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwCreateKey
RtlCreateAtomTable
user32
GetForegroundWindow
GetFocus
GetMessagePos
CheckDlgButton
oleaut32
VarCyAdd
Sections
.text Size: 422KB - Virtual size: 424KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE