Static task
static1
Behavioral task
behavioral1
Sample
c4c39218dc5ca16a13e83cb37075c06bb90d9f2d0a615227062292536044ef4f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c4c39218dc5ca16a13e83cb37075c06bb90d9f2d0a615227062292536044ef4f.exe
Resource
win10v2004-20220812-en
General
-
Target
c4c39218dc5ca16a13e83cb37075c06bb90d9f2d0a615227062292536044ef4f
-
Size
1.3MB
-
MD5
4d177815748286c77931ffa373fda42f
-
SHA1
e6904777d579f565fea4cce79f51d1f583d32f25
-
SHA256
c4c39218dc5ca16a13e83cb37075c06bb90d9f2d0a615227062292536044ef4f
-
SHA512
fdd2250ae404717ef8891f83914581302a926704beb483564bb1d6588b5020446b744429f4eecda56971d3dce5240f77e475635c2084a14050bc51f83e746a15
-
SSDEEP
24576:oNycn3lSVp2dB2cUu0JbXi77uIDM4qJWSDQ/SIBdgydKWwLZvEdookQy9W:BC3cV0dBKOuWK0Sy9ibQy9W
Malware Config
Signatures
Files
-
c4c39218dc5ca16a13e83cb37075c06bb90d9f2d0a615227062292536044ef4f.exe windows x86
d74af08b25e34adc349d1735728a0a22
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_except_handler3
kernel32
WaitForSingleObject
CloseHandle
WriteFile
CreateFileA
CreateThread
lstrcatA
GetLastError
CreateMutexA
lstrcmpA
lstrcpyA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetModuleHandleA
IsDebuggerPresent
GetCurrentProcess
lstrcmpiA
HeapFree
GetEnvironmentVariableA
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetProcessHeap
lstrlenA
GetProcAddress
advapi32
AllocateAndInitializeSid
FreeSid
CheckTokenMembership
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 934B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 294KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ