Static task
static1
Behavioral task
behavioral1
Sample
4e3734e27c18d1d4c539dd46c289dfca28286e069a460727ec97c5c7e7d85dc9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4e3734e27c18d1d4c539dd46c289dfca28286e069a460727ec97c5c7e7d85dc9.exe
Resource
win10v2004-20220901-en
General
-
Target
4e3734e27c18d1d4c539dd46c289dfca28286e069a460727ec97c5c7e7d85dc9
-
Size
505KB
-
MD5
f1f1e9f54926f534b25d8940ac8a5610
-
SHA1
b919e34bfcc858995c0943a8190b6b433c2d379b
-
SHA256
4e3734e27c18d1d4c539dd46c289dfca28286e069a460727ec97c5c7e7d85dc9
-
SHA512
b3a4b62c6c9d61b082bb8e1e287507a7358c6fdb37d9bb6534b454d4353afc8bf9072852c51694653264790af35a0dc440e9d7c9aab6ccae2f3e08bd1534ae14
-
SSDEEP
12288:EsuQEcBiE7J2i18jAKg8vteexM/TSbV+qcq+eivznGnkWAQGqDLK9K:E7xM/Mw8vtee4TSbMXvzniAQGqD
Malware Config
Signatures
Files
-
4e3734e27c18d1d4c539dd46c289dfca28286e069a460727ec97c5c7e7d85dc9.exe windows x86
808cd084a56ab1f1c3265943027cce8d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
GetTickCount
DeleteFileW
HeapFree
HeapAlloc
lstrcmpiA
GetStdHandle
SetEnvironmentVariableA
GetLogicalDrives
GetModuleHandleA
DeleteFileW
DeleteFileW
GetLastError
HeapCreate
GetStringTypeW
GetShortPathNameW
GetModuleHandleW
IsValidCodePage
GetVersion
GetConsoleTitleA
GetExitCodeProcess
lstrcatA
GetDriveTypeA
netshell
HrCreateDesktopIcon
HrLaunchConnection
DllRegisterServer
DllCanUnloadNow
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dataz Size: 498KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE