Static task
static1
Behavioral task
behavioral1
Sample
4b2d844c4324142f4f473518bf1d14b68c2e0dfce5a9dea7ff69cd09feab55c4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4b2d844c4324142f4f473518bf1d14b68c2e0dfce5a9dea7ff69cd09feab55c4.exe
Resource
win10v2004-20220812-en
General
-
Target
4b2d844c4324142f4f473518bf1d14b68c2e0dfce5a9dea7ff69cd09feab55c4
-
Size
370KB
-
MD5
4d1179c98dcd46785a8639e285b1b038
-
SHA1
b393d8c740a6ec9d7ef385381041ec24fdaeecad
-
SHA256
4b2d844c4324142f4f473518bf1d14b68c2e0dfce5a9dea7ff69cd09feab55c4
-
SHA512
ad1268afc81883b274730cc8ce53886f58ca982028c53223b5cb4b23054f175c9edc6c33e3a00964edb420c757800c97c61e42ae2403bc3744d4f17acee1246d
-
SSDEEP
6144:DhRM0t0HEAT1fxhcMxW2pL7lv6w2K/PkFtR6sFHYnHFWhTyHVEOSQTQiJY7jM56g:DhRMpHEAJLjpFv6w2K/PkFtlVMHFWg10
Malware Config
Signatures
Files
-
4b2d844c4324142f4f473518bf1d14b68c2e0dfce5a9dea7ff69cd09feab55c4.exe windows x86
ff4594908e0c55b45ed478e66597811a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
FindAtomA
GetEnvironmentVariableW
ReleaseMutex
GetCurrentThreadId
LocalFree
InitializeCriticalSection
CreateEventW
IsBadStringPtrW
WriteFile
GlobalFlags
HeapCreate
GetCurrentProcessId
GetDriveTypeA
ReleaseMutex
GetFileTime
lstrlenW
GetPrivateProfileStringA
FindClose
LoadLibraryW
user32
DrawTextA
SetFocus
CreateWindowExA
GetClassInfoA
IsWindow
GetKeyboardType
DrawStateW
GetClientRect
DispatchMessageA
GetSysColor
EndDialog
GetSysColor
CallWindowProcW
rastapi
DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone
cryptui
LocalEnroll
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 360KB - Virtual size: 359KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ