Static task
static1
Behavioral task
behavioral1
Sample
4d9c0b11a3f513f66c093e455153127b2a0311ec20d2be602e45a90d2081eff2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4d9c0b11a3f513f66c093e455153127b2a0311ec20d2be602e45a90d2081eff2.exe
Resource
win10v2004-20221111-en
General
-
Target
4d9c0b11a3f513f66c093e455153127b2a0311ec20d2be602e45a90d2081eff2
-
Size
51KB
-
MD5
67a73c33e42a7f37678c7f109889fab0
-
SHA1
ce093824c84780547b7f6b8ec3eb05b107c93922
-
SHA256
4d9c0b11a3f513f66c093e455153127b2a0311ec20d2be602e45a90d2081eff2
-
SHA512
b2e3dfbba5b5de6c92c7093477b5b88a6df69377221756fc9b402952fefbbce033abbb4720799d449a2d1dd79f96ce5c342e07c92cf29af62e94b044d20ab3cb
-
SSDEEP
768:4CEIM+vapkxZ/YT9cynJEy7b07jEI1AqLwzcZ6AxToSZxoUVrwWN:pvIkb/YTjJE71Aq+cjo0+UVR
Malware Config
Signatures
Files
-
4d9c0b11a3f513f66c093e455153127b2a0311ec20d2be602e45a90d2081eff2.exe windows x86
229d59a126b711ed6d0b25dee29368fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToSystemTime
FileTimeToLocalFileTime
GetProcessTimes
LoadLibraryA
FreeResource
LockResource
LoadResource
FindResourceA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetConsoleCtrlHandler
GetLastError
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
HeapAlloc
HeapReAlloc
RtlUnwind
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeW
user32
GetFocus
SetFocus
SetSysColors
GetSysColor
GetWindowRect
GetCursorPos
SystemParametersInfoA
SystemParametersInfoW
CopyRect
AdjustWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ