Static task
static1
Behavioral task
behavioral1
Sample
482db41dc1b95977389b1c6b14703dc23e8d9fd6fd01f278bf689168f1ef2bb6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
482db41dc1b95977389b1c6b14703dc23e8d9fd6fd01f278bf689168f1ef2bb6.exe
Resource
win10v2004-20220812-en
General
-
Target
482db41dc1b95977389b1c6b14703dc23e8d9fd6fd01f278bf689168f1ef2bb6
-
Size
717KB
-
MD5
017dedc817cfa8ce91179c690fcfb6a0
-
SHA1
7051189082fb1264386b5e5aaf9c1e2d05f965f5
-
SHA256
482db41dc1b95977389b1c6b14703dc23e8d9fd6fd01f278bf689168f1ef2bb6
-
SHA512
d567cbc928aff033465f3199e3093493fad26afd5ee8d20f9b65812ba98f0c54d2b1589e64a2a88b9fdb7520a62ce346caab24b682cb272e9a25f7818f87921a
-
SSDEEP
12288:7YdHz7oZV2j5W2Q6Y2BVQ428W+vqWt0S9SiPYZZz1SHU1vOjYt/8DIhd7OHYdHz9:7e7QwtWeBVl2b+vhOUpkpSHU1r/eIhd9
Malware Config
Signatures
Files
-
482db41dc1b95977389b1c6b14703dc23e8d9fd6fd01f278bf689168f1ef2bb6.exe windows x86
53e92335e74fd01f0d86758a87341ec2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteW
iphlpapi
GetAdaptersInfo
ws2_32
gethostbyaddr
wtsapi32
WTSRegisterSessionNotification
Sections
.text Size: 68KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 585KB - Virtual size: 585KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sfekeir Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE