Static task
static1
Behavioral task
behavioral1
Sample
4c39f470448c8250644a8d4d9ec5a19cf596362a9ff91f3a5ed11ebb75fc6075.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4c39f470448c8250644a8d4d9ec5a19cf596362a9ff91f3a5ed11ebb75fc6075.exe
Resource
win10v2004-20220812-en
General
-
Target
4c39f470448c8250644a8d4d9ec5a19cf596362a9ff91f3a5ed11ebb75fc6075
-
Size
70KB
-
MD5
ebf89fb48c9071a561e3a82aa236ba4d
-
SHA1
1c3c9ab44e119cb9062bd4f66a1c7e8528a7bdf6
-
SHA256
4c39f470448c8250644a8d4d9ec5a19cf596362a9ff91f3a5ed11ebb75fc6075
-
SHA512
cd665c01d7197b07e8514e21ed2ecdd4b478c874e7a4c0baf9152eeedf0133eb1e540111a39a8e66aed39072f18ca544faa7bb5d352e1b4ab6c9be7854536ba9
-
SSDEEP
1536:+QVosBXI4TJbfItd2LvMgPBmSyGZMFB180Jo+0Dh:+AFbwf2LbBl1aB8ZDh
Malware Config
Signatures
Files
-
4c39f470448c8250644a8d4d9ec5a19cf596362a9ff91f3a5ed11ebb75fc6075.exe windows x86
2f5ea5d8b9fc8b7b43b8c7818c27ffa3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetParent
LoadStringA
kernel32
lstrcpyA
DeleteCriticalSection
EnterCriticalSection
GetDiskFreeSpaceA
CreateMutexW
FindClose
CreateThread
VirtualAlloc
TerminateProcess
CopyFileW
GetSystemTime
LoadLibraryA
InterlockedDecrement
GetProcAddress
SizeofResource
SetLastError
ExitProcess
GlobalAlloc
advapi32
RegCreateKeyExW
RegEnumKeyExW
msvcrt
_adjust_fdiv
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ