Static task
static1
Behavioral task
behavioral1
Sample
40b4902d7f75a1255d6db7e3ca651bd330bf2fc3c06aa6020f408a7e54bb074b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
40b4902d7f75a1255d6db7e3ca651bd330bf2fc3c06aa6020f408a7e54bb074b.exe
Resource
win10v2004-20221111-en
General
-
Target
40b4902d7f75a1255d6db7e3ca651bd330bf2fc3c06aa6020f408a7e54bb074b
-
Size
1.8MB
-
MD5
e184c47d8f1d0ecceeacf2adac3fc7f1
-
SHA1
0a4170fdf173eb5cc79451a1e7b4204d5d193786
-
SHA256
40b4902d7f75a1255d6db7e3ca651bd330bf2fc3c06aa6020f408a7e54bb074b
-
SHA512
76ed1bd9c745f1c8effdc2a67969ccb949d8ec442fad822019857d11fa816443486665c8f8465cf63f0200b23abda1035246cc8a92bad41d76cee62fbc7339d5
-
SSDEEP
49152:kPkcOsQNtz32qvLtumPNejafNxVdpPIGjPRX:kNfQn3ntumPwjaf7VdpHRX
Malware Config
Signatures
Files
-
40b4902d7f75a1255d6db7e3ca651bd330bf2fc3c06aa6020f408a7e54bb074b.exe windows x86
30587aa4ac582818d6c69f90c4be188c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
FreeLibrary
advapi32
RegQueryValueExA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
shell32
SHGetFolderPathW
Sections
.text Size: 1.0MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 749KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ