Static task
static1
Behavioral task
behavioral1
Sample
b4619709255c6cb9692f6c19844da664fa348b665a8e94e450f1b883cc9c107b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b4619709255c6cb9692f6c19844da664fa348b665a8e94e450f1b883cc9c107b.exe
Resource
win10v2004-20221111-en
General
-
Target
b4619709255c6cb9692f6c19844da664fa348b665a8e94e450f1b883cc9c107b
-
Size
156KB
-
MD5
cd7d0e436a18987b253dd5115161b08d
-
SHA1
835742068653da127885430587e00bdf4c76473f
-
SHA256
b4619709255c6cb9692f6c19844da664fa348b665a8e94e450f1b883cc9c107b
-
SHA512
2280370b08dc96bbe4e5146d2b831efd42ead3257a203b1acba9e29d560531db1ad5a32afc83536ac55e4db39b99849d80a61ab611cf2722273349e38eea0fd7
-
SSDEEP
3072:ozHVeIPkk7zcNp/rd3n1SmqFYFQh/0q2lmlZtCYWS:ozHQI5z+rd3ku69rtmS
Malware Config
Signatures
Files
-
b4619709255c6cb9692f6c19844da664fa348b665a8e94e450f1b883cc9c107b.exe windows x86
1d63d79fd548ab6d1de612aa128b952a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WinExec
CloseHandle
SetFileTime
CreateFileA
FindClose
FindFirstFileA
GetSystemDirectoryA
lstrcatA
lstrcpyA
GetModuleFileNameA
GetVersionExA
GlobalFree
WriteFile
GetLastError
LockResource
GlobalAlloc
LoadResource
SizeofResource
FindResourceA
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetEnvironmentVariableA
GetShortPathNameA
GetModuleHandleA
GetStartupInfoA
user32
EndDialog
shell32
ShellExecuteExA
SHChangeNotify
msvcrt
__getmainargs
_controlfp
memset
fclose
fwrite
fseek
fopen
memcpy
fread
_exit
_XcptFilter
exit
_acmdln
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ