Static task
static1
Behavioral task
behavioral1
Sample
4c398b1e663a31acf471850160d5d574a2ad97eeb3eba2b6c6a0e760167aed2a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4c398b1e663a31acf471850160d5d574a2ad97eeb3eba2b6c6a0e760167aed2a.exe
Resource
win10v2004-20220812-en
General
-
Target
4c398b1e663a31acf471850160d5d574a2ad97eeb3eba2b6c6a0e760167aed2a
-
Size
27KB
-
MD5
08e0bbbb70e059f2ced87808c38d8c10
-
SHA1
a22be5694e33fa50445afe4359878f091035189d
-
SHA256
4c398b1e663a31acf471850160d5d574a2ad97eeb3eba2b6c6a0e760167aed2a
-
SHA512
5787dcffc4659cdce9457a160e0e8dd088eec83bfba4c072f33e27954e49d0f98599102030cb9496f665b51474d8cfbedc8cd93f6753d20e5317dbb342ce5299
-
SSDEEP
768:y2TYnvbgISyAFARggBbkzuk0bvZqG6pKBg:Onvbg3GRg8bMutbRqTyg
Malware Config
Signatures
Files
-
4c398b1e663a31acf471850160d5d574a2ad97eeb3eba2b6c6a0e760167aed2a.exe windows x86
41507753530d76bf751bd1509806ec8e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
Sections
CODE Size: 23KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE