Static task
static1
Behavioral task
behavioral1
Sample
4a0f12194b4df4eb88ffa403251e234667a6eee83544484776a3372a627e309f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4a0f12194b4df4eb88ffa403251e234667a6eee83544484776a3372a627e309f.exe
Resource
win10v2004-20220812-en
General
-
Target
4a0f12194b4df4eb88ffa403251e234667a6eee83544484776a3372a627e309f
-
Size
189KB
-
MD5
0c2e495e82a9b8a68aa27f5bc299f233
-
SHA1
34d92e16b6e25ade6d47a29d9bdea0f9641bc59e
-
SHA256
4a0f12194b4df4eb88ffa403251e234667a6eee83544484776a3372a627e309f
-
SHA512
c0ff22f34f77f560a96b7c5f1e25eed6a16e5a1b96ab6b4578c843bd36f0ef14c7f6f25844991a2a3125001fa9a0a432b967e351f1ef0e168b12703936af4b0f
-
SSDEEP
3072:1XVT+6Xoc0MXL1m894wTclioxDkLFpn4rzkUBUKD5/3qAndnGKC5y7ta+yNaH+Ae:170IZB4ycc4+FczkUBUWhqAJ7uy7ta+t
Malware Config
Signatures
Files
-
4a0f12194b4df4eb88ffa403251e234667a6eee83544484776a3372a627e309f.exe windows x86
5ebbe41cf1eb8e658842a20710b55ea9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCompressedFileSizeA
IsDebuggerPresent
CloseHandle
GetProcessHeaps
GetThreadContext
DnsHostnameToComputerNameW
FindVolumeMountPointClose
SizeofResource
FormatMessageW
SetEvent
GetPriorityClass
RtlUnwind
SetEnvironmentVariableW
FindClose
SetFileAttributesA
GetVersion
GetCPInfoExA
CallNamedPipeA
LocalFileTimeToFileTime
SetProcessShutdownParameters
FindAtomA
user32
WindowFromPoint
GetWindowPlacement
CharLowerBuffW
MessageBoxA
InsertMenuA
DrawFrameControl
CallMsgFilterW
Sections
.text Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 863B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 379B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 61KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ