Static task
static1
Behavioral task
behavioral1
Sample
4dc3ca68e7021aeafde36423bb0a4c0bb1d776d0b7fed42793707eb1437ee47d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4dc3ca68e7021aeafde36423bb0a4c0bb1d776d0b7fed42793707eb1437ee47d.exe
Resource
win10v2004-20220812-en
General
-
Target
4dc3ca68e7021aeafde36423bb0a4c0bb1d776d0b7fed42793707eb1437ee47d
-
Size
176KB
-
MD5
025ab4f9677d29640d6096630d363496
-
SHA1
c3abaddddc97a56a56188a4a05e1caab648a4b23
-
SHA256
4dc3ca68e7021aeafde36423bb0a4c0bb1d776d0b7fed42793707eb1437ee47d
-
SHA512
b1534d9eac32adc1815b7ee6101b13d8a0ca6759b7213bd74267e8ea721b5082b288ad6141c5ff119c4bd55e85ca6691a66b4b8bd9029d826b2e9ead90347d64
-
SSDEEP
3072:C0XxSoQpXQov7UWld2eyf7RJUvVB75JIdkT2G3xy:Ci9EXQo4beyjROkdkTJ
Malware Config
Signatures
Files
-
4dc3ca68e7021aeafde36423bb0a4c0bb1d776d0b7fed42793707eb1437ee47d.exe windows x86
3cc2dedc29119857a606fe971961e69c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
RpcStringBindingComposeA
RpcBindingFromStringBindingA
RpcStringFreeA
ole32
CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
kernel32
HeapSize
EnumSystemLocalesA
LeaveCriticalSection
GetCPInfoExA
RtlUnwind
GetCurrentThreadId
IsValidCodePage
GetVersionExA
GetUserDefaultLCID
GetLastError
WriteConsoleA
EnterCriticalSection
EnumResourceNamesA
CreateFileA
GetLocaleInfoW
RaiseException
InterlockedDecrement
RaiseException
SetStdHandle
Sleep
InitializeCriticalSection
DeleteCriticalSection
IsValidLocale
InterlockedIncrement
GetConsoleOutputCP
WriteConsoleW
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ