Static task
static1
Behavioral task
behavioral1
Sample
a4c9c932d59b737f060fd3961c54d07394c740404cd4c08e680aea7e9437ff55.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a4c9c932d59b737f060fd3961c54d07394c740404cd4c08e680aea7e9437ff55.exe
Resource
win10v2004-20221111-en
General
-
Target
a4c9c932d59b737f060fd3961c54d07394c740404cd4c08e680aea7e9437ff55
-
Size
85KB
-
MD5
0450407da075bdf8f92f533d2385f152
-
SHA1
3a0c8e1d4bc0ca7d176a6347ce5590e50e3148f4
-
SHA256
a4c9c932d59b737f060fd3961c54d07394c740404cd4c08e680aea7e9437ff55
-
SHA512
93943615c28e1b86b7063885c6a76272e712746c28eea1ed8e6cd62979ab61ad24058964c9900470f4f316bcc32d3a875b9040ae4646f547f5bcd019c844b230
-
SSDEEP
1536:janaKf7MovxY/2hw2JXo8JJF6wzn//a5OAZzK:qgoy/2mWXoUd//a5Oaz
Malware Config
Signatures
Files
-
a4c9c932d59b737f060fd3961c54d07394c740404cd4c08e680aea7e9437ff55.exe windows x86
c4a89d6e7f94dcf341284d572ec052cc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
SetLastError
GetProcessHeap
SetLastError
CreateMutexA
lstrlenA
GetFileAttributesA
VirtualProtectEx
CloseHandle
WriteConsoleA
SetEvent
DeleteFileW
Sleep
CreateHardLinkW
CreateDirectoryW
HeapSize
GetStartupInfoA
GlobalFree
GetLocalTime
LoadLibraryA
CreateSemaphoreA
cryptui
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
w32topl
ToplEdgeCreate
ToplEdgeInit
ToplEdgeFree
ToplEdgeDestroy
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE