Static task
static1
Behavioral task
behavioral1
Sample
4d79d19be5162ee26c75b3b6557f780e20c32ac12dd82478a4ac2618445321e5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4d79d19be5162ee26c75b3b6557f780e20c32ac12dd82478a4ac2618445321e5.exe
Resource
win10v2004-20220812-en
General
-
Target
4d79d19be5162ee26c75b3b6557f780e20c32ac12dd82478a4ac2618445321e5
-
Size
63KB
-
MD5
04f48cccebe1c26e752b3a93af742b1b
-
SHA1
1ced034eaae1291817b7ca87738c049855da3295
-
SHA256
4d79d19be5162ee26c75b3b6557f780e20c32ac12dd82478a4ac2618445321e5
-
SHA512
8db13b88e89e595615760103ca780327e6791ab2f2ba91b0b3d489e576d6351eb1a5803faa27ee7581ab524395a41d340089742ec93d77867919ef051bf76b15
-
SSDEEP
768:0G7SNj/XzYr5Fz8HnpV/N77XMMMMMMMMMMLMMMMMMMMMMeTMMMMMMMMMMAg9xYrw:0ldX2SHpVjg+8goz8p9zi+W
Malware Config
Signatures
Files
-
4d79d19be5162ee26c75b3b6557f780e20c32ac12dd82478a4ac2618445321e5.exe windows x86
54804ec924842829fb1cab8bd02cab15
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
CreateFileA
MoveFileExA
WriteFile
GetSystemDirectoryA
lstrcatA
GetLastError
lstrcmpiA
MoveFileA
GetModuleFileNameA
WinExec
CloseHandle
lstrcpyA
user32
CopyIcon
SetSystemCursor
LoadCursorA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 460B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 286B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.. Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE