Static task
static1
Behavioral task
behavioral1
Sample
d4763fc4b5df0a0a52043a3c44c237b196143485abc35255772d2ba8b389c24d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d4763fc4b5df0a0a52043a3c44c237b196143485abc35255772d2ba8b389c24d.exe
Resource
win10v2004-20221111-en
General
-
Target
d4763fc4b5df0a0a52043a3c44c237b196143485abc35255772d2ba8b389c24d
-
Size
11KB
-
MD5
5d460c696eece88c4ffc0e9aee648353
-
SHA1
6fb2036140a29a5ac8b825b50dd0a0d6ccba97e4
-
SHA256
d4763fc4b5df0a0a52043a3c44c237b196143485abc35255772d2ba8b389c24d
-
SHA512
6d502897e283221643e31f4a198fbab74c810263eac8fbedf0bc0571bf23b8910886afd6f3c03ab02bb8b0e9afb8cec1f20060efa8cf181e6a85bf591e11a2d6
-
SSDEEP
192:kQqy4fmhu4LQCFIX/F46hbtnVxbhaSl3zR2112D:kfehbAHVjG1A
Malware Config
Signatures
Files
-
d4763fc4b5df0a0a52043a3c44c237b196143485abc35255772d2ba8b389c24d.exe windows x86
d0dd355e7007da5e0bff71c28a5e3c9c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
FindResourceA
GetModuleHandleA
GetTempPathA
LoadResource
LockResource
RtlZeroMemory
SizeofResource
WriteFile
lstrcatA
shell32
ShellExecuteA
Sections
.data Size: 512B - Virtual size: 440B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 346B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 406B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ