Static task
static1
Behavioral task
behavioral1
Sample
c4ed896b5e821c3513e2e40bde165592438996b27f89972605b1470be6bb699e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c4ed896b5e821c3513e2e40bde165592438996b27f89972605b1470be6bb699e.exe
Resource
win10v2004-20220901-en
General
-
Target
c4ed896b5e821c3513e2e40bde165592438996b27f89972605b1470be6bb699e
-
Size
119KB
-
MD5
005bcd4307bda1c296c5ce4625d6a7f9
-
SHA1
b1bbe8294ec2edde3478362412a702df80ecba8d
-
SHA256
c4ed896b5e821c3513e2e40bde165592438996b27f89972605b1470be6bb699e
-
SHA512
ec0a78b5e51a0ff3a21ebb3d74d9522f08ebec7cdea405ef494b17759dc981b17349377e553a48910040bfb7a779689363876e65755c7e3d7b113ce629751eb8
-
SSDEEP
3072:aocBa+Lmu1tNVwjnmD++7/lPYk1kR4M0om:QLfumKgek1Um
Malware Config
Signatures
Files
-
c4ed896b5e821c3513e2e40bde165592438996b27f89972605b1470be6bb699e.exe windows x86
ec20cdf8fb4283108b33ca25a6bc86ac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
GetModuleHandleA
Sleep
VirtualAlloc
SetCurrentDirectoryA
VirtualFree
ExitProcess
user32
CharNextA
Sections
.text Size: 512B - Virtual size: 218B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 285B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dsfwer Size: 18KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE