Static task
static1
Behavioral task
behavioral1
Sample
f4935d1522668f81597fdadfcfac198b7537dd790516577429732f9d3459a1db.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f4935d1522668f81597fdadfcfac198b7537dd790516577429732f9d3459a1db.exe
Resource
win10v2004-20220901-en
General
-
Target
f4935d1522668f81597fdadfcfac198b7537dd790516577429732f9d3459a1db
-
Size
443KB
-
MD5
30c7ab69bdc4128b18d4b6349b65ac70
-
SHA1
8e0e374e64e8dacc65b76ebf7b29fcf07e429bab
-
SHA256
f4935d1522668f81597fdadfcfac198b7537dd790516577429732f9d3459a1db
-
SHA512
77ad966c830dd2dbc696a01bc5dd16c6736afe200ba00e9da34a6ce3e04749bf309992a3012e0c470d99d98fc6c56f8cc1183b145005fe0ccd38f8d6f5d416c4
-
SSDEEP
6144:Ar9/N4l6orpuxyg7b1I8yZvduVFUsUm+Ra76NeSqe9KC5dUm/0bqQISXtXIBHhpL:W44osxo8yzuYDqe9HLMbdpIhhpAwkQ
Malware Config
Signatures
Files
-
f4935d1522668f81597fdadfcfac198b7537dd790516577429732f9d3459a1db.exe windows x86
826c085b23ac71ca6b7cbb2360179ecc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BuildCommDCBAndTimeoutsW
IsValidLanguageGroup
GetCurrentThreadId
user32
InSendMessage
GetMenuCheckMarkDimensions
GetInputState
shell32
SHChangeNotifyRegister
Sections
.text Size: 436KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 193B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE