Static task
static1
Behavioral task
behavioral1
Sample
4dfd7229e911e7ecaea5d403a83108ece93d72c4b1a4f1beb1b801590d05ecdb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4dfd7229e911e7ecaea5d403a83108ece93d72c4b1a4f1beb1b801590d05ecdb.exe
Resource
win10v2004-20220812-en
General
-
Target
4dfd7229e911e7ecaea5d403a83108ece93d72c4b1a4f1beb1b801590d05ecdb
-
Size
76KB
-
MD5
46a0cc40e85518be8cbe0c94b4c62bdd
-
SHA1
e2e91cbb0b2b2c977ffba8863be1326f76169222
-
SHA256
4dfd7229e911e7ecaea5d403a83108ece93d72c4b1a4f1beb1b801590d05ecdb
-
SHA512
7b916df2a43f1dc3ed80e6b349148ca23f2389922692755919a3b1ee7d212efb137b7ecdd29d0d4e02186e10c08170e7e4a8be3bfa0899bdf946569d78287979
-
SSDEEP
1536:Kkzr+HRlkLYD+ZIMY+C7Swo5CS0vVENQNdKnpjVrs2ryrd1vUQuq6:lzrKRmU+3YTqF0dEON0Hs2qo
Malware Config
Signatures
Files
-
4dfd7229e911e7ecaea5d403a83108ece93d72c4b1a4f1beb1b801590d05ecdb.exe windows x86
0440e59fa973315e6f31371d08b5dbc4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UpdateResourceA
OpenMutexW
PeekConsoleInputW
GetNlsSectionName
DeleteTimerQueue
BaseDumpAppcompatCache
OpenDataFile
CreateThread
LocalHandle
GetModuleFileNameW
CreateDirectoryExA
EscapeCommFunction
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE