Static task
static1
Behavioral task
behavioral1
Sample
413544b1e4c3487e788b77ce1e3698e9b367afb0eb3fdfe8f270389381b3d017.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
413544b1e4c3487e788b77ce1e3698e9b367afb0eb3fdfe8f270389381b3d017.exe
Resource
win10v2004-20221111-en
General
-
Target
413544b1e4c3487e788b77ce1e3698e9b367afb0eb3fdfe8f270389381b3d017
-
Size
2.3MB
-
MD5
9fc3a741818f6539a42efc9c40e8a12f
-
SHA1
8635f86590b98dd19abbbdd8a738d9ba4791467a
-
SHA256
413544b1e4c3487e788b77ce1e3698e9b367afb0eb3fdfe8f270389381b3d017
-
SHA512
12417fe58d1a45377b1455fda334ccc8ee7a0c32a13fce272b77c84181eb4f42b09b9a6833aa5c53f9cfeed2d1e67c63e12f9524eb33b1c1829a4f9f5d665438
-
SSDEEP
49152:NMYDAUfYEcE3Yf42r88RT5Xz210aboDAbXrK20npzeg9x:GiAUwIYwy88RThjDG7mUg9x
Malware Config
Signatures
Files
-
413544b1e4c3487e788b77ce1e3698e9b367afb0eb3fdfe8f270389381b3d017.exe windows x86
73ec795c6c369c6ce2c3b4c3f6477daa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DuplicateHandle
GetShortPathNameA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
1 Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
2 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
4 Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
5 Size: 48KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7 Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE