Static task
static1
Behavioral task
behavioral1
Sample
4f4a64411c34e78ce368d8458c1362ebcab6ee232862cab6102ae11bcc6ac652.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4f4a64411c34e78ce368d8458c1362ebcab6ee232862cab6102ae11bcc6ac652.exe
Resource
win10v2004-20220812-en
General
-
Target
4f4a64411c34e78ce368d8458c1362ebcab6ee232862cab6102ae11bcc6ac652
-
Size
72KB
-
MD5
073e835b5fecfd0ead0b8db36ccc2efc
-
SHA1
61e37ec309690f97f7cedd294160265237d83695
-
SHA256
4f4a64411c34e78ce368d8458c1362ebcab6ee232862cab6102ae11bcc6ac652
-
SHA512
1d10a4ea0c152b3dd3dba25f8999ae56aef1d579586bc7cc4a8356e6b139257a19bc418ead40b566cae675156de516d8823501122e4e30b808f43bd242ec72a4
-
SSDEEP
768:hUk+xxC3fSi6qwg2XQlhcv8siiKRlRetauvewwSZp2njg0B7fh6HvuMk:hUk+MCTtXyh1FPRWauvexXTh6H2Mk
Malware Config
Signatures
Files
-
4f4a64411c34e78ce368d8458c1362ebcab6ee232862cab6102ae11bcc6ac652.exe windows x86
78280c0d8b23558471a4fa812da493f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
DisconnectNamedPipe
CreateFileA
WriteFile
GetSystemDefaultLCID
Sleep
CreateThread
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
GetFullPathNameA
ConnectNamedPipe
FreeResource
LockResource
LoadResource
FindResourceA
DeleteFileA
GetModuleHandleA
GetModuleFileNameA
GetCurrentProcess
GetSystemDirectoryA
UnmapViewOfFile
GetFileSize
ExitProcess
CreateMutexA
FlushFileBuffers
IsBadReadPtr
GetVersionExA
GetWindowsDirectoryA
LoadLibraryA
GetLastError
GetSystemInfo
SetFilePointer
SizeofResource
GetProcAddress
GetStartupInfoA
advapi32
RegCreateKeyExA
OpenProcessToken
LookupPrivilegeValueA
RegEnumValueA
AdjustTokenPrivileges
RegSetValueExA
RegCloseKey
RegOpenKeyExA
winmm
mixerGetLineControlsA
mixerOpen
mixerGetLineInfoA
mixerClose
mixerGetControlDetailsA
mixerSetControlDetails
msvcrt
calloc
_exit
_except_handler3
_controlfp
__set_app_type
??3@YAXPAX@Z
sprintf
??2@YAPAXI@Z
__CxxFrameHandler
free
__p__fmode
__getmainargs
_XcptFilter
exit
_acmdln
_adjust_fdiv
_initterm
__setusermatherr
__p__commode
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ