Static task
static1
Behavioral task
behavioral1
Sample
4d6f630612a72498164fcb94a2fdba04418e0650034251c8632bb1924a2df113.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4d6f630612a72498164fcb94a2fdba04418e0650034251c8632bb1924a2df113.exe
Resource
win10v2004-20221111-en
General
-
Target
4d6f630612a72498164fcb94a2fdba04418e0650034251c8632bb1924a2df113
-
Size
468KB
-
MD5
41d2c3f9c51ecec49780a1a0826331c0
-
SHA1
aef43638eb9cf9e158f18493fdd6e48e0084e891
-
SHA256
4d6f630612a72498164fcb94a2fdba04418e0650034251c8632bb1924a2df113
-
SHA512
31d90752d2b8c885e382445ce1ab7d5a01ef1da2cb74cfaa1cfbe3f229045a44288d343d27768533486b2d3a9f9e1de93681dc2771adb559be787d3a0ddcc4a8
-
SSDEEP
6144:cLtVDmLBCai5M5J39V9bzNIZ6zqpjXQSxn1FYJq8GomJ+quTIw6gC1wrd1VhgOGs:cDmLW5M5dV2Z6zuAU7Xom4TcYC8VA0n
Malware Config
Signatures
Files
-
4d6f630612a72498164fcb94a2fdba04418e0650034251c8632bb1924a2df113.exe windows x86
db679e049a53c57a1d743f27bb25645d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowPos
IsWindow
MessageBoxA
IsWindowEnabled
GetSysColor
IsWindowVisible
ScreenToClient
kernel32
GetVersionExA
LCMapStringA
ResetEvent
LeaveCriticalSection
CreateFileA
HeapDestroy
Sleep
TlsGetValue
FindClose
CreateFileW
UnmapViewOfFile
InitializeCriticalSection
WideCharToMultiByte
GetTimeZoneInformation
TerminateProcess
GetExitCodeProcess
SetEnvironmentVariableA
GetACP
lstrcpynA
GetSystemTimeAsFileTime
CompareStringA
WriteFile
SetUnhandledExceptionFilter
GetModuleHandleA
GetStringTypeA
GetCPInfo
SetFilePointer
CreateMutexA
GetCurrentThread
CloseHandle
GetCommandLineA
FreeEnvironmentStringsW
InterlockedDecrement
UnhandledExceptionFilter
CreateThread
GetCurrentProcessId
GetLocaleInfoA
GetConsoleMode
FileTimeToLocalFileTime
GetCurrentProcess
LoadLibraryA
GetModuleFileNameA
IsDebuggerPresent
QueryPerformanceCounter
SetEvent
lstrlenA
GetSystemInfo
LCMapStringW
EnterCriticalSection
HeapFree
GetLastError
HeapAlloc
VirtualAlloc
ExitProcess
GetStartupInfoA
GetVersion
GetProcAddress
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
GetEnvironmentVariableA
HeapCreate
VirtualFree
RtlUnwind
InterlockedIncrement
GetOEMCP
HeapReAlloc
MultiByteToWideChar
GetStringTypeW
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 432KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE