Static task
static1
Behavioral task
behavioral1
Sample
4873a7aacb2b44ddf3796ef5ad98d2d25eccf33c9da25929a29871becdf468bd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4873a7aacb2b44ddf3796ef5ad98d2d25eccf33c9da25929a29871becdf468bd.exe
Resource
win10v2004-20220901-en
General
-
Target
4873a7aacb2b44ddf3796ef5ad98d2d25eccf33c9da25929a29871becdf468bd
-
Size
64KB
-
MD5
c1015acaaf21327bd652e3169a569b95
-
SHA1
a7d65429fe4f9c6a506aae44dcf03c364e5690b6
-
SHA256
4873a7aacb2b44ddf3796ef5ad98d2d25eccf33c9da25929a29871becdf468bd
-
SHA512
68536723f8f05ffcbeb86a7ea436e93baa0513a7d0cd3616048fae8d67a64d6a29becfd889877670c2bb313ded793372810c89e7f80593188e786dc6f81aa0d3
-
SSDEEP
1536:BpGA9wMRPgjP++Qm5SrCoXFQCE/ffff1I9QcaK:v9wMRuQm5ICsE/ffffLcD
Malware Config
Signatures
Files
-
4873a7aacb2b44ddf3796ef5ad98d2d25eccf33c9da25929a29871becdf468bd.exe windows x86
d6231a481f81e5494e2578e57ab6b555
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetPrivateProfileSectionA
GetLogicalDrives
InterlockedDecrement
GetPrivateProfileIntA
GetModuleHandleW
ReadFileEx
SetEnvironmentVariableA
GetDiskFreeSpaceW
GetPrivateProfileIntA
lstrcmpA
LoadLibraryA
Heap32First
GetCurrentDirectoryA
GetExitCodeProcess
lstrcpyW
InterlockedIncrement
Sleep
GetStringTypeW
WaitForSingleObject
GetDiskFreeSpaceW
GetLongPathNameA
FindResourceW
apphelp
SdbCreateMsiTransformFile
AllowPermLayer
ApphelpCheckIME
ApphelpCheckExe
clbcatq
DllGetClassObject
SetupOpen
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
ComPlusMigrate
ComPlusMigrate
SetSetupSave
SetSetupSave
SetupOpen
CheckMemoryGates
SetupOpen
DllGetClassObject
version
VerFindFileA
Sections
.text Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE