Static task
static1
Behavioral task
behavioral1
Sample
4ea973447a530595a34138d302a602e92b78db9eee9da2a432d0a691534f2dc7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4ea973447a530595a34138d302a602e92b78db9eee9da2a432d0a691534f2dc7.exe
Resource
win10v2004-20220901-en
General
-
Target
4ea973447a530595a34138d302a602e92b78db9eee9da2a432d0a691534f2dc7
-
Size
277KB
-
MD5
497dc86e5d7662f73a9837498120fca3
-
SHA1
21949319914a84e635676e4efa1fea6a9fa1e3d3
-
SHA256
4ea973447a530595a34138d302a602e92b78db9eee9da2a432d0a691534f2dc7
-
SHA512
798d097f557cf15134120a52cfae47dcd3cc0d50898f2d1399ae03554d726f2357c56db396c5742cad746eb83d071136bac7943044ba901916d4e1d288b2c284
-
SSDEEP
6144:2PCp3Y3bqwEX2ShShxhz0XZogzxn9pN96mIqmtgzhBIMmv6:8IKXEmNdz0pNZvNpMtMhBIG
Malware Config
Signatures
Files
-
4ea973447a530595a34138d302a602e92b78db9eee9da2a432d0a691534f2dc7.exe windows x86
bd9054c8a8ea38eaebc14e8632d37fb8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
CreateFileA
SetUnhandledExceptionFilter
FindResourceW
CloseHandle
GetTickCount
GetProcessHeap
lstrcpyW
QueryPerformanceCounter
lstrlenW
GetLocalTime
HeapAlloc
GetSystemTimeAsFileTime
HeapFree
WideCharToMultiByte
LoadLibraryW
SetLastError
GetUserDefaultLCID
lstrcmpA
MultiByteToWideChar
GetCurrentProcessId
GlobalFindAtomA
SystemTimeToFileTime
olecli32
LeSaveToStream
LeQueryBounds
LeSetData
LeGetUpdateOptions
LeRelease
LeReconnect
LeQueryOpen
LeObjectLong
LeQueryOutOfDate
LeObjectConvert
LeSetBounds
psapi
EnumPageFilesW
EnumProcessModules
GetPerformanceInfo
GetProcessImageFileNameA
EnumPageFilesA
EmptyWorkingSet
Sections
.text Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ