Static task
static1
Behavioral task
behavioral1
Sample
4220b375e552ec279c0b7a665d617549ab5f0dd5441a21d835fc467d9ef788a8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4220b375e552ec279c0b7a665d617549ab5f0dd5441a21d835fc467d9ef788a8.exe
Resource
win10v2004-20221111-en
General
-
Target
4220b375e552ec279c0b7a665d617549ab5f0dd5441a21d835fc467d9ef788a8
-
Size
66KB
-
MD5
9e471de1f1ea30fe18264d4cd300d449
-
SHA1
c555c30e4c98832032cff5e98b67385c1b536030
-
SHA256
4220b375e552ec279c0b7a665d617549ab5f0dd5441a21d835fc467d9ef788a8
-
SHA512
0a8dac441b7dbb8102c824faccd360c08604b2499da7e226b3747fac31ef8f93b3f3c5a2cd9e4ac66893ce478b4eec5a4f2ef9f26393a9c83c6a4fbe4850640a
-
SSDEEP
1536:vnmdioyndJz6UUtXP7Jr810PwoVfcZTjztzeR:vmdVQvjUFB810P1GTP0R
Malware Config
Signatures
Files
-
4220b375e552ec279c0b7a665d617549ab5f0dd5441a21d835fc467d9ef788a8.exe windows x86
927054f11158dd7b81aa0d5e2529be6d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadProcessMemory
EnumCalendarInfoW
BackupRead
GetPrivateProfileSectionA
CreateFileMappingW
VirtualProtectEx
FreeConsole
_lclose
VirtualAllocEx
GetUserGeoID
SetLocaleInfoA
DuplicateConsoleHandle
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 51KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE