Static task
static1
Behavioral task
behavioral1
Sample
4fb709ec963b7bc7469e3afd3630b91b103389649a09c4bf087526c6b8f98523.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4fb709ec963b7bc7469e3afd3630b91b103389649a09c4bf087526c6b8f98523.exe
Resource
win10v2004-20220901-en
General
-
Target
4fb709ec963b7bc7469e3afd3630b91b103389649a09c4bf087526c6b8f98523
-
Size
32KB
-
MD5
559c325767cfffe7882a7888119e0b97
-
SHA1
de0d3017b16cfdded267c42636ff1e61bc4aff92
-
SHA256
4fb709ec963b7bc7469e3afd3630b91b103389649a09c4bf087526c6b8f98523
-
SHA512
9962333bb2163d3ad1df10e024394bd71e72eb57dea43667d8db8e424869fe3586638f8934edefdc91dc4d40835299b3d4470515ed930676b2c4abbed436b06e
-
SSDEEP
768:7/j7ugHESkNStUla9LT2aI3O45duuzEM+RYVKV66:7eaESkNSP9oO45fEJRYVM
Malware Config
Signatures
Files
-
4fb709ec963b7bc7469e3afd3630b91b103389649a09c4bf087526c6b8f98523.exe windows x86
05cf523b61b04e1fc651ae616a766905
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetStartupInfoA
CloseHandle
GetModuleHandleA
GetComputerNameA
GetVolumeInformationA
GetCurrentProcessId
GetTickCount
GetCurrentProcess
GetModuleFileNameA
GetVersionExA
GetEnvironmentVariableA
GetSystemTime
LoadLibraryA
GetProcAddress
FreeLibrary
WideCharToMultiByte
Sleep
advapi32
OpenProcessToken
LookupAccountNameW
GetUserNameA
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
LookupAccountSidA
setupapi
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
netapi32
NetUserEnum
NetApiBufferFree
msvcrt
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strcat
_ftol
malloc
strchr
memset
strcpy
strstr
free
calloc
printf
strlen
_snprintf
strncpy
memcpy
_except_handler3
_stricmp
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE