Static task
static1
Behavioral task
behavioral1
Sample
c4f31ee048020655241b986917b29a15766d6460599e310f8ce95bdf39326ac9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c4f31ee048020655241b986917b29a15766d6460599e310f8ce95bdf39326ac9.exe
Resource
win10v2004-20221111-en
General
-
Target
c4f31ee048020655241b986917b29a15766d6460599e310f8ce95bdf39326ac9
-
Size
164KB
-
MD5
33e8f0802fc2e70868ccaed5d0bbf876
-
SHA1
76f535c1a1acd5106c8f4985518774d601e1cb3f
-
SHA256
c4f31ee048020655241b986917b29a15766d6460599e310f8ce95bdf39326ac9
-
SHA512
c2f3d2af046bf947dcdde9c8ec6d0144eaca69550c2d0e210523454e2570a89bf807eea6008c4428d07175754e683e1e9f522ef69ded4f85dd5dc221c6db25a2
-
SSDEEP
3072:3Xc3xDbJ1BAeeC/LvHmNYpOS1eW0wXHExs2RTM/sh9hins7jf5J9:nc3xD9SC/LvGNMOQCwkbWyisZ
Malware Config
Signatures
Files
-
c4f31ee048020655241b986917b29a15766d6460599e310f8ce95bdf39326ac9.exe windows x86
b86bbb196f48319572af68aecc809f54
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrencyFormatW
GetTempPathA
GetProcessTimes
SetStdHandle
GetNamedPipeHandleStateA
OpenSemaphoreA
GetLocaleInfoW
GetCurrentProcessId
GetStartupInfoA
CreateFileA
GetNumberOfConsoleInputEvents
GetCalendarInfoA
FileTimeToLocalFileTime
lstrcmpiW
SetFilePointerEx
FindFirstFileA
PulseEvent
FindFirstVolumeMountPointA
GetNumberFormatA
GetModuleHandleA
RemoveDirectoryA
SwitchToFiber
LocalHandle
CreateWaitableTimerA
MoveFileWithProgressW
GetTimeFormatA
SetFileApisToANSI
RequestWakeupLatency
SetEndOfFile
msvcrt
_adj_fptan
_fsopen
vswprintf
fwrite
_makepath
_XcptFilter
gets
__p__fmode
__set_app_type
setlocale
_heapadd
_amsg_exit
_exit
_except_handler3
_control87
isupper
islower
_finite
cosh
_stati64
_cgetws
_controlfp
_initterm
__getmainargs
_strdate
fgets
_adjust_fdiv
_acmdln
_strtoui64
exit
_adj_fdivr_m32i
_vsnwprintf
wcscoll
__setusermatherr
_mbsnextc
__p__commode
user32
RegisterClassW
SetWindowPos
DdeAbandonTransaction
DefWindowProcW
DialogBoxIndirectParamW
GetNextDlgTabItem
DrawAnimatedRects
CharUpperA
DdeQueryConvInfo
ToUnicode
GetMouseMovePointsEx
ChangeDisplaySettingsA
GetWindowContextHelpId
GrayStringW
LoadAcceleratorsW
IsCharAlphaA
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ