Static task
static1
Behavioral task
behavioral1
Sample
4a6f56274794d34c08a1013b723b56f72ff99912d3559635020d11eb1a4a8cf0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4a6f56274794d34c08a1013b723b56f72ff99912d3559635020d11eb1a4a8cf0.exe
Resource
win10v2004-20220812-en
General
-
Target
4a6f56274794d34c08a1013b723b56f72ff99912d3559635020d11eb1a4a8cf0
-
Size
301KB
-
MD5
311798ef503d5f7a8b5d022eb1e3d090
-
SHA1
1bff2c12a40aabf736cb2ed00080db363226f0da
-
SHA256
4a6f56274794d34c08a1013b723b56f72ff99912d3559635020d11eb1a4a8cf0
-
SHA512
8bf800fedc21042c3780cc91f647077fd56d4e0460c7d4221b3333d7135a069761781016fe3627086f962d6af853365733980c75321ca2392bd36019c14846dd
-
SSDEEP
6144:xWnuyOn2Da20ozZwXNUJn3rzbLQ/1t27WKUFUqrXfrIR+1YdnTTOyb:gxsWxzi9UJvbYt27WKmUqrXfrI7
Malware Config
Signatures
Files
-
4a6f56274794d34c08a1013b723b56f72ff99912d3559635020d11eb1a4a8cf0.exe windows x86
0a83ec2c4e8b2172cecfcd4dc6254988
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetLastError
IsValidCodePage
GetCurrentProcess
GetTickCount
GetExitCodeThread
IsBadWritePtr
GetFileAttributesA
VirtualProtect
CreateDirectoryW
LocalLock
FindClose
GetLocaleInfoW
GetStringTypeA
GetFileAttributesA
TlsGetValue
GetModuleHandleA
FindResourceW
HeapFree
RemoveDirectoryW
GetDriveTypeW
MapViewOfFile
user32
SetFocus
wsprintfW
PeekMessageW
LoadImageW
LoadStringA
PostMessageW
GetWindowLongW
IsWindow
GetWindowTextW
SetCursor
IsDialogMessageA
LoadCursorA
DispatchMessageA
msctf
DllUnregisterServer
TF_InitSystem
DllUnregisterServer
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE