Static task
static1
Behavioral task
behavioral1
Sample
4d066de19836c0c4ebcbb40f1f1b3c9a4c1c009174d96c35c171a793d2214d93.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4d066de19836c0c4ebcbb40f1f1b3c9a4c1c009174d96c35c171a793d2214d93.exe
Resource
win10v2004-20220901-en
General
-
Target
4d066de19836c0c4ebcbb40f1f1b3c9a4c1c009174d96c35c171a793d2214d93
-
Size
19KB
-
MD5
823cea392180c0b915e36041a0d574cb
-
SHA1
19b64cd7555a89baa7d2b0874862189975df921c
-
SHA256
4d066de19836c0c4ebcbb40f1f1b3c9a4c1c009174d96c35c171a793d2214d93
-
SHA512
e9c5297ada65a5c6c89955a4e5eae4e119897526c49be4ce273c9c37c7102c13453ae9e188303359351b802643539b892dc0769a02ddc349a2f7b377b59c2126
-
SSDEEP
384:aMQ5IfgIYXO5Ti2+D6fw9SBtFpS0u5uwc/1FC+yp/WLgzj:aMQafgdOpp+DZEBtFpS0Iump/Rzj
Malware Config
Signatures
Files
-
4d066de19836c0c4ebcbb40f1f1b3c9a4c1c009174d96c35c171a793d2214d93.exe windows x86
bd05c02e365122387290040933964569
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
kernel32
LocalFree
SetUnhandledExceptionFilter
MapViewOfFile
GetLastError
InterlockedExchange
UnmapViewOfFile
CreateMutexA
GetStartupInfoA
InterlockedIncrement
Sleep
CreateFileA
GetTimeZoneInformation
CreateFileMappingA
ReleaseMutex
IsBadCodePtr
CloseHandle
GetEnvironmentVariableA
SetEnvironmentVariableA
GetLocaleInfoA
OpenMutexA
GetTempPathA
GetLocalTime
GetSystemTime
ExitProcess
IsDebuggerPresent
FormatMessageA
ReadFile
VirtualAlloc
GetModuleHandleA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
user32
MessageBoxA
wsprintfA
GetSystemMetrics
ole32
CoCreateInstance
CoTaskMemRealloc
CoInitialize
StringFromGUID2
CoUninitialize
CLSIDFromString
oleaut32
LoadTypeLi
LoadRegTypeLi
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ