Static task
static1
Behavioral task
behavioral1
Sample
f4526bf69a0bc0ab63bef2cf9a3424c956e0cfad3924222150fd09e4d9701b6b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f4526bf69a0bc0ab63bef2cf9a3424c956e0cfad3924222150fd09e4d9701b6b.exe
Resource
win10v2004-20220812-en
General
-
Target
f4526bf69a0bc0ab63bef2cf9a3424c956e0cfad3924222150fd09e4d9701b6b
-
Size
299KB
-
MD5
0fbbf2d7c1e86c128ec21d76cb705df0
-
SHA1
c424f72be72ab851464a38507a96a94c2fc35f8b
-
SHA256
f4526bf69a0bc0ab63bef2cf9a3424c956e0cfad3924222150fd09e4d9701b6b
-
SHA512
7f8aa428d55639adde7cdc69b90aad31b219f171e9d09d1adadddb7cacae2495b3b81523b9d6561644322288917cf222a20b192fd5cd3d56e2e86985ae1bedde
-
SSDEEP
6144:a80mQqzCvXuL/nrBAo+XqxQy0LSFrlMzsILIeBrRz3AMU:afmgg/rWo+uQy0LarBMlRr
Malware Config
Signatures
Files
-
f4526bf69a0bc0ab63bef2cf9a3424c956e0cfad3924222150fd09e4d9701b6b.exe windows x86
57328975f75bf8b87c53a33bb8d7b59f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CopyFileW
IsBadCodePtr
IsValidLocale
WriteConsoleW
SetEvent
GetStartupInfoA
WriteConsoleW
CreatePipe
lstrlenW
GetPriorityClass
IsBadStringPtrA
GetCurrentDirectoryA
GetLastError
lstrcpyW
DisconnectNamedPipe
WriteConsoleW
GetModuleHandleA
GetFileAttributesA
HeapCreate
CloseHandle
ReleaseMutex
msftedit
RichEditWndProc
RichListBoxWndProc
SetCustomTextOutHandlerEx
RichComboBoxWndProc
shell32
SHGetDiskFreeSpaceA
SHGetMalloc
ShellMessageBoxA
SHGetMalloc
ExtractIconA
ShellAboutA
SHGetSettings
DuplicateIcon
DragAcceptFiles
SHGetDiskFreeSpaceA
StrChrA
DragQueryFileA
ShellMessageBoxA
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 289KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 81B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ