Static task
static1
Behavioral task
behavioral1
Sample
f4e0b0adafb06070800bb34230de77e9a1b7dd1172d8b7170405b8f2cc417c8b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f4e0b0adafb06070800bb34230de77e9a1b7dd1172d8b7170405b8f2cc417c8b.exe
Resource
win10v2004-20220812-en
General
-
Target
f4e0b0adafb06070800bb34230de77e9a1b7dd1172d8b7170405b8f2cc417c8b
-
Size
312KB
-
MD5
063397ef84c1fe3d903e9a71482d63a0
-
SHA1
e6ed4850465c00c15a7aeb6ff3e766ccb87bff93
-
SHA256
f4e0b0adafb06070800bb34230de77e9a1b7dd1172d8b7170405b8f2cc417c8b
-
SHA512
330f9e2093d41f9aca42b8fcf111e4f547faebf0dc77a5a840e96a417a03ee65c2438cb0b425f3b71c0cbefeec4de18c9000ede056d481518ccebd2c35caa259
-
SSDEEP
6144:Nx4WB6ycJpBHIoReOyS4nUrqmiuFFDZhyLl13OUz/8m10h:74tRsnS4UZiMJZ4BYUZmh
Malware Config
Signatures
Files
-
f4e0b0adafb06070800bb34230de77e9a1b7dd1172d8b7170405b8f2cc417c8b.exe windows x86
5338fb308e5c31cc6e81c37d881e6ef7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
VirtualProtect
WriteConsoleA
FreeEnvironmentStringsA
GetACP
HeapCreate
InterlockedExchange
RaiseException
GlobalFree
IsDebuggerPresent
FlushFileBuffers
GetCurrentProcess
OpenSemaphoreA
GetStdHandle
GetCurrentThread
GetCurrentProcessId
GetModuleHandleA
SetEvent
GetCompressedFileSizeA
GetLocaleInfoA
GetCommandLineA
user32
GetWindowTextLengthA
GetDlgItem
ReleaseDC
SetActiveWindow
DrawTextA
GetFocus
ValidateRgn
SetForegroundWindow
GetWindow
EndPaint
FrameRect
GetCursorPos
wsprintfA
GetClassNameA
BeginPaint
IsIconic
ShowWindow
GetParent
FillRect
linkinfo
ResolveLinkInfoA
DestroyLinkInfo
IsValidLinkInfo
GetLinkInfoData
GetCanonicalPathInfoA
rtutils
LogEventA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ