Static task
static1
Behavioral task
behavioral1
Sample
f4a69b4847f2e9cefd5cf6831c1629ebc60ecf3191246f204e07f2294793364d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f4a69b4847f2e9cefd5cf6831c1629ebc60ecf3191246f204e07f2294793364d.exe
Resource
win10v2004-20220901-en
General
-
Target
f4a69b4847f2e9cefd5cf6831c1629ebc60ecf3191246f204e07f2294793364d
-
Size
252KB
-
MD5
e1ebebcd592c6774fb1bb78d9cc40a63
-
SHA1
ff9b339778ae97bb8da03e0d584f4154ff6d3faf
-
SHA256
f4a69b4847f2e9cefd5cf6831c1629ebc60ecf3191246f204e07f2294793364d
-
SHA512
34660acf330dda24820d3390193ea2cddda9dce5a1d924c395714b55ed7015d7a9bd96ab4e91a76d42fe391e29327ff2eb2ceb467af1ab190c5085cda988d04a
-
SSDEEP
3072:v0DgZMk1FMWx/RkUZ4SKBgquvvvujA0ghgkYwbioO0iiyMv7:8DgGkMWrOSKBg9vvvujbkYwa
Malware Config
Signatures
Files
-
f4a69b4847f2e9cefd5cf6831c1629ebc60ecf3191246f204e07f2294793364d.exe windows x86
7f60e19b993df104a5d2f3b07badfc07
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
TerminateProcess
GetCurrentProcess
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
GetLastError
GetFileAttributesA
HeapAlloc
HeapReAlloc
HeapFree
VirtualFree
VirtualAlloc
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
CloseHandle
ReadFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
RtlUnwind
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
SetConsoleCtrlHandler
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
GetCPInfo
GetACP
GetOEMCP
CompareStringA
CompareStringW
SetEnvironmentVariableA
LCMapStringA
LCMapStringW
SetEndOfFile
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
WriteConsoleA
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE