Static task
static1
Behavioral task
behavioral1
Sample
f4eaa104dd7dba5cf6c7966345eb1743e641487278c5c07bc5d36f89638e20aa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f4eaa104dd7dba5cf6c7966345eb1743e641487278c5c07bc5d36f89638e20aa.exe
Resource
win10v2004-20220812-en
General
-
Target
f4eaa104dd7dba5cf6c7966345eb1743e641487278c5c07bc5d36f89638e20aa
-
Size
126KB
-
MD5
560a97016423d7a3afe679bc496231a0
-
SHA1
8d6f771baa7982df86a2c347bd3cb43e6d2f3d3a
-
SHA256
f4eaa104dd7dba5cf6c7966345eb1743e641487278c5c07bc5d36f89638e20aa
-
SHA512
d028fc4346d85d053a618230ddd505072cb40b5ac7a7cc3ed8a9b681acaf8d4a91f21f2507d7593e9fd04978f4f00c50bc6a46f7c9df6054cce75dea63148af9
-
SSDEEP
1536:3+hwOD8MGZITX5DlJ8bvsWvAemJwb+52h56XQYfWEpF2DxNTr7YQclbZuJbQhmZx:325x2vWmij/mdNP76lebP8Vr
Malware Config
Signatures
Files
-
f4eaa104dd7dba5cf6c7966345eb1743e641487278c5c07bc5d36f89638e20aa.exe windows x86
a6ee0d213026a518295d766448dcdfd0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesW
GetFileAttributesW
GetStringTypeA
GetModuleHandleA
CreateEventA
IsValidCodePage
HeapFree
GetExitCodeThread
GetVersionExA
CreateDirectoryW
GlobalLock
RemoveDirectoryW
GetCurrentProcess
GetPrivateProfileSectionA
VirtualProtectEx
LocalFlags
SetLastError
FindClose
GetLocaleInfoW
TlsGetValue
GetCurrentThread
user32
GetWindowLongW
GetWindowTextW
DefDlgProcA
SetCursor
LoadCursorA
wsprintfW
DispatchMessageA
IsWindow
SetCursorPos
IsDialogMessageA
PeekMessageW
SetFocus
PostMessageW
msdtcprx
DTC_XaOpen
DTC_XaEnd
DTC_XaCommit
DTC_XaStart
uxtheme
CloseThemeData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE