Static task
static1
Behavioral task
behavioral1
Sample
a4580a897dfa0ddf5162d7995bb1ea5b17661e7e3aa754e71cbc09a41f93a6d8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a4580a897dfa0ddf5162d7995bb1ea5b17661e7e3aa754e71cbc09a41f93a6d8.exe
Resource
win10v2004-20220812-en
General
-
Target
a4580a897dfa0ddf5162d7995bb1ea5b17661e7e3aa754e71cbc09a41f93a6d8
-
Size
119KB
-
MD5
ce858a6f7828fd6ca6353ebe84bbe8f3
-
SHA1
ce8dfc90de7a75df0c3c05f30722a2b31d0201f7
-
SHA256
a4580a897dfa0ddf5162d7995bb1ea5b17661e7e3aa754e71cbc09a41f93a6d8
-
SHA512
6c1468288b5a8f5350dd3973dfab58a383b4315e57c4cc202205b118b64d01d50a5afc0180c4727d1f62179709ca9ebea2c1c8fe537e092df267ca25d1f44973
-
SSDEEP
1536:KFS6zKQJFPOSbHtnw4UfTrsbxiL4+iZGnh3/JCI+g/i0CBgJ9Fp0WUvCNPYcq:MdzPBw4UP8+4+iZKBNV63qFp5USQ9
Malware Config
Signatures
Files
-
a4580a897dfa0ddf5162d7995bb1ea5b17661e7e3aa754e71cbc09a41f93a6d8.exe windows x86
770141755f4ee13b78a6acc9855c6976
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
VirtualProtect
SetLastError
TlsGetValue
FindAtomA
ReleaseMutex
GetTickCount
CloseHandle
DeleteCriticalSection
GetModuleHandleA
OpenMutexA
Sleep
GetVersionExW
CreateThread
FindClose
CreateMutexA
lstrlenA
SearchPathA
FindResourceExA
GetLastError
user32
FlashWindow
EnableWindow
CreateWindowExA
CloseWindow
DragDetect
CreateMenu
CopyImage
DispatchMessageA
IsIconic
GetMessageA
EndDialog
DialogBoxParamA
GetKeyState
EqualRect
loghours
DialinHoursDialog
DialinHoursDialogEx
LogonScheduleDialog
DirSyncScheduleDialog
DirSyncScheduleDialogEx
advapi32
RegCloseKey
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ