Static task
static1
Behavioral task
behavioral1
Sample
4c854e7070f2fe75af3638feb363fa9841f383e1239878b26024e9859b95f394.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4c854e7070f2fe75af3638feb363fa9841f383e1239878b26024e9859b95f394.exe
Resource
win10v2004-20220812-en
General
-
Target
4c854e7070f2fe75af3638feb363fa9841f383e1239878b26024e9859b95f394
-
Size
431KB
-
MD5
30343f31510106bc7fcad529d2b53a70
-
SHA1
66dec6219ec7a278951022f67534a228ecc7bb95
-
SHA256
4c854e7070f2fe75af3638feb363fa9841f383e1239878b26024e9859b95f394
-
SHA512
c121e049bed8097035015c36d761efee1af72390d154369999747e40fb31fa32079bd9456af0c8bd639563576a559dcb99f5ffd2b7717651b76c9d1514f33cd1
-
SSDEEP
6144:f6UBkMqLSBI/WheZJFv/pHeS1ZJjIQ84K4NMvs4Uj5PQ/RUebpuU6Q0sWUq0VFFa:fjuLSBwMQJFJl1Z+QhXnFmU5s5nN
Malware Config
Signatures
Files
-
4c854e7070f2fe75af3638feb363fa9841f383e1239878b26024e9859b95f394.exe windows x86
4b1918c42e7c9b9343f433577424675a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
IsTokenUntrusted
LsaLookupNames
ntdll
NtQueryInformationProcess
user32
GetMessagePos
GetShellWindow
kernel32
GetUserDefaultLCID
Sections
.text Size: 428KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 163B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE