Static task
static1
Behavioral task
behavioral1
Sample
4b8ea1cb027ad070d8e94ed146c331f973efbfef0d3dee28d6f5e67398ec5829.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4b8ea1cb027ad070d8e94ed146c331f973efbfef0d3dee28d6f5e67398ec5829.exe
Resource
win10v2004-20221111-en
General
-
Target
4b8ea1cb027ad070d8e94ed146c331f973efbfef0d3dee28d6f5e67398ec5829
-
Size
128KB
-
MD5
44ea050526ecc97c08f54c2349252700
-
SHA1
871263e886b324543cf14d8c69398f55009544ff
-
SHA256
4b8ea1cb027ad070d8e94ed146c331f973efbfef0d3dee28d6f5e67398ec5829
-
SHA512
7afd60fe4d984a4e506420c6f5a1e8a9e27eb28c448a1e4853630e6ab98e9f56bdb4705284f7eef722d6f3312dfb174414e4e43371f992923d8aebddb18e54a1
-
SSDEEP
3072:5IMVZT5GqVXivkPtsCK8k9t3ywG3RY1W9V74:5IMVhEdcFsChk95yvhO+4
Malware Config
Signatures
Files
-
4b8ea1cb027ad070d8e94ed146c331f973efbfef0d3dee28d6f5e67398ec5829.exe windows x86
9eadb38f691a0b93dce1ca2ec6b7fa7c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
FreeEnvironmentStringsA
GetCPInfo
GetCommandLineA
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileType
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetTempPathA
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
LCMapStringA
LoadLibraryA
MultiByteToWideChar
RtlUnwind
SetHandleCount
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
WriteFile
GetACP
user32
LoadAcceleratorsA
RegisterClassA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 8B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 106B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ