Static task
static1
Behavioral task
behavioral1
Sample
b4cd891dd18b6a8072832ab3a5c8839a2b56bc03c096c1e60b39e658c4af46dd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b4cd891dd18b6a8072832ab3a5c8839a2b56bc03c096c1e60b39e658c4af46dd.exe
Resource
win10v2004-20221111-en
General
-
Target
b4cd891dd18b6a8072832ab3a5c8839a2b56bc03c096c1e60b39e658c4af46dd
-
Size
94KB
-
MD5
3f4eb92a7a958c5b8b163ed9b8c8257d
-
SHA1
10ec3d3e495fdc448e9db476483e75308bba7756
-
SHA256
b4cd891dd18b6a8072832ab3a5c8839a2b56bc03c096c1e60b39e658c4af46dd
-
SHA512
baa0ab44acf024b296e234064bf539d8dc27b22219cbc16eed430e2a5ab5caa985593535652118c51e460f21d9f5fed622549f539522ed221f9526a540b948f6
-
SSDEEP
1536:1PXOopYAZYai8op5j5bq5bf7dmtHaqjAcLmQ4jbZGDmnc8YaEJwZK4/83ZoMOAL0:pXg5oZWHLjAUmjrnhZEXtpxLF6H
Malware Config
Signatures
Files
-
b4cd891dd18b6a8072832ab3a5c8839a2b56bc03c096c1e60b39e658c4af46dd.exe windows x86
8c7c31365566a8691c61e24e65e230c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
NlsResetProcessLocale
EnumSystemGeoID
LocalFlags
EnumCalendarInfoExA
UnmapViewOfFile
EnumCalendarInfoA
FindFirstVolumeMountPointW
DebugBreak
FreeEnvironmentStringsA
RequestWakeupLatency
VirtualAlloc
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.krdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE