Static task
static1
Behavioral task
behavioral1
Sample
4680fd7bef5de68b228bc0829de07c6b6cb92e282ecc5a2697785580dd89681a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4680fd7bef5de68b228bc0829de07c6b6cb92e282ecc5a2697785580dd89681a.exe
Resource
win10v2004-20220812-en
General
-
Target
4680fd7bef5de68b228bc0829de07c6b6cb92e282ecc5a2697785580dd89681a
-
Size
115KB
-
MD5
5fed9d5bb2db1709a8dfd33f44f6f990
-
SHA1
afa56c33f55b702faa2df15103d5644745f32420
-
SHA256
4680fd7bef5de68b228bc0829de07c6b6cb92e282ecc5a2697785580dd89681a
-
SHA512
27fcd0ff1b6a924f3749df367bd6525b5869da7eed8846477e738c4f9640e849f6d698d6823ab03d03f3661a5f0e75f1233c684d7977d83086caf600372613c8
-
SSDEEP
3072:hiNqO1ShZVP274poG+ukw+2wjCETqHQTP9:4MOSZVG4Swkwwp
Malware Config
Signatures
Files
-
4680fd7bef5de68b228bc0829de07c6b6cb92e282ecc5a2697785580dd89681a.exe windows x86
3391024d27d801b58b270449bd4b8c2c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetStartupInfoW
VirtualAllocEx
user32
LoadIconW
LoadIconA
gdi32
RealizePalette
SelectPalette
GetStockObject
advapi32
RegOpenKeyW
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 406B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dataG Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE