Static task
static1
Behavioral task
behavioral1
Sample
4b5d91ccba0ff2c1440fd4354e7b2005b4717637cfcc8c32e8ec22b55ba9b379.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4b5d91ccba0ff2c1440fd4354e7b2005b4717637cfcc8c32e8ec22b55ba9b379.exe
Resource
win10v2004-20221111-en
General
-
Target
4b5d91ccba0ff2c1440fd4354e7b2005b4717637cfcc8c32e8ec22b55ba9b379
-
Size
301KB
-
MD5
55fea3c9a445f27f79d3ec0e9a440f60
-
SHA1
c09d2795ea32a604e453b8f812948b55c9aed77f
-
SHA256
4b5d91ccba0ff2c1440fd4354e7b2005b4717637cfcc8c32e8ec22b55ba9b379
-
SHA512
8bbfd11d43f803607e6ff751ea13e15db0bf50e34ee9f7598b5509bb022f9a3ccf19151f1af684b6ab5599ddbfef5e618c636ef127518643cf923a54090956e1
-
SSDEEP
6144:vvoVPod3g5b+pCF8YsYWwW83XL0XvVhhX3UEWZZ6Gy54YSlSG/sPY:vgxg3g5b+1DYjWQITFEE0MGy54YSlVUw
Malware Config
Signatures
Files
-
4b5d91ccba0ff2c1440fd4354e7b2005b4717637cfcc8c32e8ec22b55ba9b379.exe windows x86
af1b7edb8189b15df4f72b31091d6965
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringA
CreateNamedPipeA
lstrcmpiA
EndUpdateResourceA
GetTickCount
lstrcmpiA
lstrcmpiA
GetDriveTypeA
FileTimeToLocalFileTime
lstrcmpiA
GetModuleHandleA
GetStdHandle
GetExitCodeProcess
IsValidCodePage
GetLogicalDrives
HeapCreate
TlsFree
lstrcatW
SetLastError
GetBinaryTypeA
lstrcmpiA
GetLocalTime
CreateWaitableTimerW
ntmarta
AccFreeIndexArray
AccConvertAccessToSD
EventNameFree
EventGuidToName
Sections
.text Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 294KB - Virtual size: 294KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ