Static task
static1
Behavioral task
behavioral1
Sample
4a67a5601ccdce5c9ca14a78ad1e32f3f8b8decf9b658fc00b0e2a65656e14ae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4a67a5601ccdce5c9ca14a78ad1e32f3f8b8decf9b658fc00b0e2a65656e14ae.exe
Resource
win10v2004-20220901-en
General
-
Target
4a67a5601ccdce5c9ca14a78ad1e32f3f8b8decf9b658fc00b0e2a65656e14ae
-
Size
300KB
-
MD5
529f60379060d498ec2efa46e1796400
-
SHA1
e1cade6cc6e90113caada1a3f52f1991e6b970a9
-
SHA256
4a67a5601ccdce5c9ca14a78ad1e32f3f8b8decf9b658fc00b0e2a65656e14ae
-
SHA512
9563550d5ab352ee44bdc87d1d4146b3455d209e490e1572ebcd585f967999e62cfcec673d56bb455f9ebf4b18e0863bf437cdbf26f702fb05ae44bd1c710995
-
SSDEEP
6144:tT3WnuyEmgK7dD9+4zY9bxSTvBn06L0bHzWwmDgMUnvt1QL:tquxK77+e4bxQZnDL0ja5BUl2L
Malware Config
Signatures
Files
-
4a67a5601ccdce5c9ca14a78ad1e32f3f8b8decf9b658fc00b0e2a65656e14ae.exe windows x86
428c0e8ba175afe932375d49997f52cd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReleaseMutex
GetStdHandle
CreateDirectoryA
HeapSize
DeleteFileA
WriteFile
SetLastError
GetModuleHandleA
GetDriveTypeW
GetLocaleInfoA
GetCommandLineA
CancelIo
RemoveDirectoryA
IsBadWritePtr
VirtualProtect
GetProcessHeap
CreateMailslotA
SetLocalTime
GetFileAttributesA
ResetEvent
MapViewOfFile
user32
LoadImageA
GetWindowTextW
PeekMessageA
GetWindowLongW
DestroyMenu
GetCapture
SetFocus
SetCursor
GetCaretPos
DispatchMessageA
wsprintfA
PostMessageW
LoadCursorA
hnetcfg
DllCanUnloadNow
DllGetClassObject
HNetGetSharingServicesPage
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ