Static task
static1
Behavioral task
behavioral1
Sample
4e8379d79686e7ce78bcf1ab08432952b86dbaa99e51b779286d1a4206fe6738.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4e8379d79686e7ce78bcf1ab08432952b86dbaa99e51b779286d1a4206fe6738.exe
Resource
win10v2004-20220812-en
General
-
Target
4e8379d79686e7ce78bcf1ab08432952b86dbaa99e51b779286d1a4206fe6738
-
Size
769KB
-
MD5
9a429a6281aaf0d24a2dd1f08103ee7a
-
SHA1
6517d398976676f7e4e50eabec6216b066ee5a08
-
SHA256
4e8379d79686e7ce78bcf1ab08432952b86dbaa99e51b779286d1a4206fe6738
-
SHA512
cd7ac0c82b6b5208efa1b8948bd7536d8c14bf90fc2d555e7a2bcbbbe35b6892d0fedfcc877a5e4fcad41d32f6911b68b75feb59408f6be58d6cbd745aec7fbb
-
SSDEEP
24576:H2G4kuwLHOBSXqlcBfHhGcVtp0YewiAauYudIFp:WDcLHOjcBprhg0YuqFp
Malware Config
Signatures
Files
-
4e8379d79686e7ce78bcf1ab08432952b86dbaa99e51b779286d1a4206fe6738.exe windows x86
126b5cbbbb6094a1eb599b8309a3b4d6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
CreateDirectoryW
SetStdHandle
FindClose
Beep
GetTickCount
RemoveDirectoryA
GetCommandLineA
WriteFile
OpenEventA
CreateFileA
VirtualProtect
CreateEventW
ReleaseMutex
ResetEvent
CreateFileMappingW
RemoveDirectoryA
lstrlenA
ReleaseSemaphore
FindClose
DeleteFileA
GetDriveTypeA
GetFileType
GetModuleHandleA
WriteConsoleW
user32
CreateIcon
DestroyMenu
DispatchMessageA
GetSysColor
DestroyMenu
MessageBoxA
DrawTextW
IsZoomed
GetClassInfoA
PeekMessageA
FindWindowA
IsWindow
GetWindowLongA
dmloader
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ