Static task
static1
Behavioral task
behavioral1
Sample
c4d8a183b2e7afec2df99d16f609e7560e02dcc201697e4ea28369e895e84fe9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c4d8a183b2e7afec2df99d16f609e7560e02dcc201697e4ea28369e895e84fe9.exe
Resource
win10v2004-20220812-en
General
-
Target
c4d8a183b2e7afec2df99d16f609e7560e02dcc201697e4ea28369e895e84fe9
-
Size
108KB
-
MD5
6619e049cc5d06c5f1a168b5c2ed288f
-
SHA1
dcc8060946ebcc32aa70fcb46623b1f8eecf91ad
-
SHA256
c4d8a183b2e7afec2df99d16f609e7560e02dcc201697e4ea28369e895e84fe9
-
SHA512
9713d3cd9c02c607461a20e99608e694eea86929353cc01a236c3bce5624f18c0ce58cea0872cfdc61539eda952bce04207ca45392ff1279b1dc6394cbd5fe78
-
SSDEEP
1536:N0hjB9X29DIN/5ynpQ7dAyjdJw7SzdQPnBhI0n0ZiEbtH3gnPeo9trVnD+3eH:mFX29fp3+dxdQvrJn2bpoeoXVPH
Malware Config
Signatures
Files
-
c4d8a183b2e7afec2df99d16f609e7560e02dcc201697e4ea28369e895e84fe9.exe windows x86
d740c6b869dac154ef6e51097ce3173a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
TerminateThread
GetLastError
CloseHandle
VirtualFree
GetFileSize
VirtualAlloc
LeaveCriticalSection
GetCurrentThreadId
OpenFileMappingA
FlushFileBuffers
Sleep
GetProcAddress
CreateFileA
ReleaseMutex
user32
RegisterClassA
LoadAcceleratorsA
netapi32
NetDfsRemoveFtRootForced
avifil32
AVISaveOptions
AVISaveOptionsFree
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 205KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xvda Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relc Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE