Static task
static1
Behavioral task
behavioral1
Sample
4429e1f06f8ca03487d269b5e453c09f7304c99891e8b798b99fafd7324a83fa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4429e1f06f8ca03487d269b5e453c09f7304c99891e8b798b99fafd7324a83fa.exe
Resource
win10v2004-20220812-en
General
-
Target
4429e1f06f8ca03487d269b5e453c09f7304c99891e8b798b99fafd7324a83fa
-
Size
108KB
-
MD5
f99419aa78837fa1b816267f5119887f
-
SHA1
62eac161fde739612c0ef6cd94b254deff870ca2
-
SHA256
4429e1f06f8ca03487d269b5e453c09f7304c99891e8b798b99fafd7324a83fa
-
SHA512
96f431402ffcbc95492e35310189791e7739ebcda00f5878c83a36dca4a7d41180748f24556c7d229e858c171611aceed0f70d8a44c7fb1e3b140fcfe6405075
-
SSDEEP
1536:7Thsan/doetGnWylA8frGKggTgSpySqNlMkR+1QhInMb/:76G1XtaWj8foQ7pySG9sRMb/
Malware Config
Signatures
Files
-
4429e1f06f8ca03487d269b5e453c09f7304c99891e8b798b99fafd7324a83fa.exe windows x86
aa092ea9ba2a8a7ac2078a6c92288446
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadLocale
VirtualProtect
GetDriveTypeA
GetUserDefaultLangID
DeleteFileA
SetCurrentDirectoryA
lstrcmpiW
GetStringTypeW
GetProcAddress
GlobalLock
RtlMoveMemory
lstrlenW
SetStdHandle
GetCurrentThread
GetVersionExA
GetModuleHandleA
lstrcatA
SizeofResource
GetFileTime
InterlockedIncrement
GetTempPathA
GetCommandLineW
GetExitCodeProcess
UnhandledExceptionFilter
lstrcpyA
GetTempFileNameA
LoadResource
GetFileAttributesW
GetCurrentProcessId
msvcrt
__p___initenv
_XcptFilter
__set_app_type
__getmainargs
_initterm
_except_handler3
tan
__p__commode
_controlfp
__p__fmode
_exit
_adjust_fdiv
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Gyzab Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ