Static task
static1
Behavioral task
behavioral1
Sample
4f358a7e9b8a0125ca09c4bb30d7b7aacb2690b967fae2393aa55cc2bca3b2c0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4f358a7e9b8a0125ca09c4bb30d7b7aacb2690b967fae2393aa55cc2bca3b2c0.exe
Resource
win10v2004-20220812-en
General
-
Target
4f358a7e9b8a0125ca09c4bb30d7b7aacb2690b967fae2393aa55cc2bca3b2c0
-
Size
750KB
-
MD5
3a1264c251da72cc79d4c32006e7fcf0
-
SHA1
d5d868c94cade9d9e09cc16c5403c2ad6328cbca
-
SHA256
4f358a7e9b8a0125ca09c4bb30d7b7aacb2690b967fae2393aa55cc2bca3b2c0
-
SHA512
ad5cb2a52d5fd5f12520d27bf9da547a46761be42d30a276201da09f71c3d2903f75a7ac62a435094c18c2b2b60ab955f6bd5f544bc7dcc13fb5b9e621b8d505
-
SSDEEP
12288:0bKRkr7g6U4GcAQwNMOzJI2OdGbG+ngAArhYRZ5p2Ol66VKc3vVdMNnZesIzly3G:A8OU4JAQwNMQJKdwG2gAIhYH2UKcENnY
Malware Config
Signatures
Files
-
4f358a7e9b8a0125ca09c4bb30d7b7aacb2690b967fae2393aa55cc2bca3b2c0.exe windows x86
e32cd2e9406424d83282ce382af8ab1e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathFileExistsA
kernel32
CloseHandle
CreateFileA
CreateFileW
FindClose
FindFirstFileW
FindNextFileW
FreeEnvironmentStringsA
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetCurrentThreadId
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStringTypeA
GetTempPathW
GetVersionExA
HeapFree
HeapSize
LCMapStringA
LoadLibraryA
MultiByteToWideChar
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
WriteFile
lstrcatA
lstrlenA
lstrlenW
HeapAlloc
advapi32
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
Sections
AUTO Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 126KB - Virtual size: 353KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ