Static task
static1
Behavioral task
behavioral1
Sample
4114d48021c6b9661dd9b9c415bf38122ecd36d56cf1119d119d3a50da1c2f38.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4114d48021c6b9661dd9b9c415bf38122ecd36d56cf1119d119d3a50da1c2f38.exe
Resource
win10v2004-20220812-en
General
-
Target
4114d48021c6b9661dd9b9c415bf38122ecd36d56cf1119d119d3a50da1c2f38
-
Size
821KB
-
MD5
ee99f849678a35cda088b8bdb4bcc39a
-
SHA1
73a9204aa14eaf6a3fe4dc83486a1b5a95c46558
-
SHA256
4114d48021c6b9661dd9b9c415bf38122ecd36d56cf1119d119d3a50da1c2f38
-
SHA512
5ff7506918f1030ee78387a33447e0ca5b488fb8c60d2e42873b3b57b97191f48fa94f39a04e16a64d062307ba88945ae8cb870967816ab7d1246ece843bab00
-
SSDEEP
24576:suDE1N4RxgtxcHsm/vmAbna0ESvESCJHWBQ/pb1O:sUEbaqAvmucSvEpJHWs
Malware Config
Signatures
Files
-
4114d48021c6b9661dd9b9c415bf38122ecd36d56cf1119d119d3a50da1c2f38.exe windows x86
8912a5d4e67213db9114b1ca1d2cc4c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcmpW
GetPrivateProfileIntW
GetTimeFormatA
VirtualProtectEx
CompareStringW
GetVolumeInformationA
CreateMailslotW
GetFileType
lstrcatA
ReadConsoleW
GetCurrentDirectoryA
GetProcessHeap
WriteFile
GetSystemTime
GetDiskFreeSpaceW
GetLastError
HeapFree
GetEnvironmentVariableW
GetModuleHandleA
dsdmo
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllUnregisterServer
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdata Size: 797KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ