Static task
static1
Behavioral task
behavioral1
Sample
b4c488f2761dd80c51f6b7be91c1c0c5c551b7ae5027ab2aac9c668e0ca3f6e8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b4c488f2761dd80c51f6b7be91c1c0c5c551b7ae5027ab2aac9c668e0ca3f6e8.exe
Resource
win10v2004-20220812-en
General
-
Target
b4c488f2761dd80c51f6b7be91c1c0c5c551b7ae5027ab2aac9c668e0ca3f6e8
-
Size
726KB
-
MD5
06f3b89d71ea704dff3c46963a8acdc0
-
SHA1
fa1f96278ee29a18abcf886d77904c4b5b753c3e
-
SHA256
b4c488f2761dd80c51f6b7be91c1c0c5c551b7ae5027ab2aac9c668e0ca3f6e8
-
SHA512
84a9b6f9af7e8c94b5c61ccddd53f092be467a64d43dbe9ba6b687efb5326416c0e5396b8f1c0374f547e2bbf15d9af29ca160625e587880be0e29c7b089bff6
-
SSDEEP
12288:Gtqc+CSLZYISNGWj0MpiLjAdg8VoXb4lIcqpLj4tMUJGwsNhzce5O5qBQR3:G1+LZ8NDX/dV2wqpTws0e4qBQR3
Malware Config
Signatures
Files
-
b4c488f2761dd80c51f6b7be91c1c0c5c551b7ae5027ab2aac9c668e0ca3f6e8.exe windows x86
b7c309bf17b1341aac8a4bf9b4a9c790
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedPopEntrySList
CreateFiberEx
ntdll
ZwAccessCheckByTypeResultList
ZwQueryFullAttributesFile
oleaut32
VarR8FromUI2
ws2_32
WSARecvDisconnect
advapi32
LsaQueryDomainInformationPolicy
user32
GetFocus
GetClipboardSequenceNumber
Sections
.text Size: 717KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE