Static task
static1
Behavioral task
behavioral1
Sample
f4ef95805f16cc83d8ff5c241b1644e324c8fbc1829d68e3eed26059ccf40f23.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f4ef95805f16cc83d8ff5c241b1644e324c8fbc1829d68e3eed26059ccf40f23.exe
Resource
win10v2004-20220812-en
General
-
Target
f4ef95805f16cc83d8ff5c241b1644e324c8fbc1829d68e3eed26059ccf40f23
-
Size
338KB
-
MD5
2ade54c3428206474911b22a3c124756
-
SHA1
6efda6ba6652e19d8b7c70c75d4e16b2eb25c475
-
SHA256
f4ef95805f16cc83d8ff5c241b1644e324c8fbc1829d68e3eed26059ccf40f23
-
SHA512
f74a7b198a35dae24945cfdd8efcca981abd0bcb2ebfcd5f5273f0cfc74eb9a490a646e0a9c0a6c7d56c80911a2ad61ac7221b93f4171f953609a990e091dd9d
-
SSDEEP
6144:8nc64DCtD752cycYt4Tl9HSw4T2xmEKhDYfJE9kfIy4jNYoZooqwNgk:8cdK75tHYt4rj4TCxDfIyUjodk
Malware Config
Signatures
Files
-
f4ef95805f16cc83d8ff5c241b1644e324c8fbc1829d68e3eed26059ccf40f23.exe windows x86
0729c5bb3e9204487673ae7fb0fad879
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
FindClose
HeapDestroy
GetCommandLineA
GlobalMemoryStatus
HeapCreate
GetStdHandle
GetCurrentProcessId
CreateIoCompletionPort
LoadLibraryExA
GetTimeFormatA
IsDebuggerPresent
GetACP
InterlockedExchange
VirtualProtect
GetTapeStatus
GetOEMCP
GetModuleHandleA
GetCurrentThread
HeapQueryInformation
GetProcessHeap
user32
GetClassNameA
GetFocus
DrawTextA
DragDetect
GetDlgItem
EndPaint
GetTitleBarInfo
FillRect
GetParent
GetCursorPos
ShowWindow
wsprintfA
GetWindow
FrameRect
GetWindowTextLengthA
SetActiveWindow
ReleaseDC
BeginPaint
SetForegroundWindow
gdi32
CreatePalette
GetLayout
CloseFigure
GetClipBox
CreateBitmap
userenv
DeleteProfileA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ