Static task
static1
Behavioral task
behavioral1
Sample
4dbf3dceb177a6da5156026410e827d2b2fd130df64441ca1f3c309c2c141bfd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4dbf3dceb177a6da5156026410e827d2b2fd130df64441ca1f3c309c2c141bfd.exe
Resource
win10v2004-20220812-en
General
-
Target
4dbf3dceb177a6da5156026410e827d2b2fd130df64441ca1f3c309c2c141bfd
-
Size
60KB
-
MD5
116b6afdfa4c6c96f8ad1ac8b7adc4c2
-
SHA1
296d4f793184f396fcf027edf7c718df19114d14
-
SHA256
4dbf3dceb177a6da5156026410e827d2b2fd130df64441ca1f3c309c2c141bfd
-
SHA512
cbd943130ef1fee27f76d7524095152d325415f1796196d1d83bc525f7aded3cbc8163f571e7ca600b013ffe0ae2da19b84fa705653b6e39f7195f677fed0d78
-
SSDEEP
768:ri/My0p89+zxEbjakT725yBFkQF3CXnf5+NODzu1QW1N41wMr9uygSCyslOgv07v:/zK9P3EA6cyXfBuyWcr9JgS2Ogs76ZQ
Malware Config
Signatures
Files
-
4dbf3dceb177a6da5156026410e827d2b2fd130df64441ca1f3c309c2c141bfd.exe windows x86
1b7ca1033d6052d828a7a2243b66ed85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleA
DeleteFileA
CloseHandle
EnumResourceTypesA
GetCommandLineA
GlobalFlags
CloseHandle
CreateEventW
HeapDestroy
GetFileAttributesW
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
HeapCreate
GetDriveTypeW
lstrlenA
SetLastError
GetCommandLineA
GetConsoleTitleA
GetTimeFormatW
advapi32
IsValidSid
RegCreateKeyExW
IsValidSecurityDescriptor
RegQueryValueW
RegDeleteValueA
IsValidSid
IsValidSid
CreateProcessAsUserW
RegEnumKeyA
IsValidSid
InitializeSid
IsValidSid
IsValidAcl
cnvfat
ConvertFAT
ConvertFAT
ConvertFAT
ConvertFAT
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yknnijn Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE