Static task
static1
Behavioral task
behavioral1
Sample
4367dcf6b16897ca0a4cc2fe745cf292e1cbb67f3fca06c17e79d6976a1f18f0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4367dcf6b16897ca0a4cc2fe745cf292e1cbb67f3fca06c17e79d6976a1f18f0.exe
Resource
win10v2004-20221111-en
General
-
Target
4367dcf6b16897ca0a4cc2fe745cf292e1cbb67f3fca06c17e79d6976a1f18f0
-
Size
1.1MB
-
MD5
3493c6bb7cc140b9f520aa8571a903c1
-
SHA1
cba05ae22925636236be58c28b93bc4e125048ea
-
SHA256
4367dcf6b16897ca0a4cc2fe745cf292e1cbb67f3fca06c17e79d6976a1f18f0
-
SHA512
e77f76f3dc02a7db1e1c46521925c515eb5de5db27bb60e6f0159b65bafba3c3be961a85b22f32394d733f2f8eaacfa91040ee89d8ee2eebcb118f127cec8adb
-
SSDEEP
24576:q+9tWbM4LoSEzCgjV1HPbNCBtegaFGFYFyCJJa4K:qlbM2ZmVZPbILUYFYFyCJJzK
Malware Config
Signatures
Files
-
4367dcf6b16897ca0a4cc2fe745cf292e1cbb67f3fca06c17e79d6976a1f18f0.exe windows x86
998383a0d3eee350ddb8b84d1cee40d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLangID
GetUserDefaultLCID
GetModuleHandleA
GetCommandLineW
GetCurrentProcess
GetTickCount
GetCurrentProcessId
GetSystemDefaultLCID
GetSystemDefaultLangID
GetCurrentThread
GetCurrentThreadId
GetCommandLineA
HeapAlloc
GetProcessHeap
SetLastError
GetStringTypeW
Sleep
IsDebuggerPresent
WriteFile
SetUnhandledExceptionFilter
GetOEMCP
GetFileAttributesA
FindClose
GetModuleFileNameW
UnmapViewOfFile
GetCPInfo
EnterCriticalSection
CreateProcessA
InterlockedDecrement
FreeLibrary
WideCharToMultiByte
Sections
.text Size: 328KB - Virtual size: 327KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 814KB - Virtual size: 813KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ