Static task
static1
Behavioral task
behavioral1
Sample
4ef5d12d665b13a06db1d52c0148e58797bb858ffc7dd30f48abf806f49fca49.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4ef5d12d665b13a06db1d52c0148e58797bb858ffc7dd30f48abf806f49fca49.exe
Resource
win10v2004-20220901-en
General
-
Target
4ef5d12d665b13a06db1d52c0148e58797bb858ffc7dd30f48abf806f49fca49
-
Size
131KB
-
MD5
0e7ba7cfa921cd90c98259a4b191fa00
-
SHA1
01fc71f804492e80da1f6a69c88432921730982f
-
SHA256
4ef5d12d665b13a06db1d52c0148e58797bb858ffc7dd30f48abf806f49fca49
-
SHA512
1bc6533c3e032000eafd06df6d8a51ee27604a47a8deb733ca577dfd9e2f66f27cb334aee4eb7a71b00cd14ca0e974f84e84c3b2ea37e58cc16f8cce18ee4140
-
SSDEEP
3072:6iDkg2dDaqB+IMacaDJBfebsyUNteXVF1VvrJJinskVUoK:6iDd2p1ZDUDkTVc
Malware Config
Signatures
Files
-
4ef5d12d665b13a06db1d52c0148e58797bb858ffc7dd30f48abf806f49fca49.exe windows x86
78346122b8bab6f797393fa3dbb3c990
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessW
DeviceIoControl
EnumCalendarInfoA
ExitProcess
FileTimeToLocalFileTime
FlushFileBuffers
GetEnvironmentVariableA
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
IsDebuggerPresent
LoadLibraryA
SetHandleCount
Sleep
VirtualAlloc
VirtualFree
user32
EnableMenuItem
GetDesktopWindow
GetSubMenu
IsWindow
IsWindowVisible
LoadStringA
ScreenToClient
SetFocus
SetTimer
SetWindowTextA
ShowWindow
gdi32
CreateDIBSection
GetClipBox
GetTextExtentPoint32A
GetTextMetricsA
SaveDC
shell32
DragQueryFile
DragQueryPoint
ExtractIconW
FindExecutableW
SHCreateDirectoryExA
SHFileOperationA
SHGetFileInfo
SHGetFileInfoW
SHGetFolderPathA
SHGetPathFromIDList
ShellExecuteEx
Shell_NotifyIconA
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ