Static task
static1
Behavioral task
behavioral1
Sample
4e48993846674996c85893ad5ff3597547218ad8a8d09c29bce8890bbfe64210.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4e48993846674996c85893ad5ff3597547218ad8a8d09c29bce8890bbfe64210.exe
Resource
win10v2004-20220812-en
General
-
Target
4e48993846674996c85893ad5ff3597547218ad8a8d09c29bce8890bbfe64210
-
Size
602KB
-
MD5
9eae9c61dcb70ec1980ef629f0f40207
-
SHA1
7b854b52aec3ddae564b23d8ccddcdaef4488579
-
SHA256
4e48993846674996c85893ad5ff3597547218ad8a8d09c29bce8890bbfe64210
-
SHA512
60256df920debb097026a4c8ba0f02ff4a661447195e3e3f9e01336684a8ede1bbbb2d72fe47b893b23f13fb932b6f6cb98c4c622e9a76b4fdba563bce823d27
-
SSDEEP
12288:2lh5LtbTJfgFQhkFkPNuWo/kMzL9yP7XixZBp9PJ4BSH:2l7Lt/J6+kF2Zo3zLA7XihPCBq
Malware Config
Signatures
Files
-
4e48993846674996c85893ad5ff3597547218ad8a8d09c29bce8890bbfe64210.exe windows x86
d491ee2cd7fafffb712939f9ce2b0d93
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHFileOperationA
kernel32
HeapCreate
HeapDestroy
SetFileAttributesA
CloseHandle
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
WriteFile
CreateDirectoryA
DeleteFileA
GetTempFileNameA
GetTempPathA
ReadFile
SetFilePointer
GetFileSize
GetModuleFileNameA
Sleep
GetExitCodeProcess
CreateProcessA
HeapAlloc
HeapFree
GetLastError
GetFileType
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
FlushFileBuffers
VirtualFree
VirtualAlloc
HeapReAlloc
SetEndOfFile
SetHandleCount
GetStdHandle
SetStdHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ