Static task
static1
Behavioral task
behavioral1
Sample
4cc64ea707394dc4d6a9d6bc52183ec6538b2c7c14d3d0ced9cfc39191213514.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4cc64ea707394dc4d6a9d6bc52183ec6538b2c7c14d3d0ced9cfc39191213514.exe
Resource
win10v2004-20220812-en
General
-
Target
4cc64ea707394dc4d6a9d6bc52183ec6538b2c7c14d3d0ced9cfc39191213514
-
Size
23KB
-
MD5
86e92743d942fde1055c6db13861ecf1
-
SHA1
f293c1f879199faca666dd0779ed8163c9e46675
-
SHA256
4cc64ea707394dc4d6a9d6bc52183ec6538b2c7c14d3d0ced9cfc39191213514
-
SHA512
930f2439230548552201315d59d6b3b4abc47db2caf36f283f7315a3613b6d917fbd8cf87cd600853a942459a0dee403b96f67b86e8c2f0c9b483696d65e39cd
-
SSDEEP
384:ip9m1X1/Rrl87XbSh4ik+mbUrnoPSEW5nWSJFg0j0O5SlgF:aknG7XOhu8ToPeBJFge0BKF
Malware Config
Signatures
Files
-
4cc64ea707394dc4d6a9d6bc52183ec6538b2c7c14d3d0ced9cfc39191213514.exe windows x86
8f3be410e562b9de8ad5fc60d9c08545
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_except_handler3
exit
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
_cexit
_XcptFilter
_exit
_c_exit
setlocale
wcslen
qsort
strchr
_ftol
wcscoll
_wcsicoll
strcoll
_stricoll
atoi
_strnicmp
_iob
fprintf
advapi32
IsTextUnicode
kernel32
WideCharToMultiByte
GetTempPathA
GetTempFileNameA
GetDiskFreeSpaceA
WriteFile
CloseHandle
ResetEvent
ReadFile
GetOverlappedResult
GlobalMemoryStatusEx
GetSystemInfo
GetCPInfo
WaitForSingleObject
GetStdHandle
CreateFileA
GetFileType
GetFileSize
GetConsoleMode
CreateEventA
MultiByteToWideChar
GetProcessHeap
HeapAlloc
HeapFree
GetLastError
GetModuleHandleA
FormatMessageA
VirtualAlloc
ntdll
RtlMultiByteToUnicodeN
RtlUnicodeToOemN
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ