Static task
static1
Behavioral task
behavioral1
Sample
4cb0217ad248151bbf2df91bad377b8551b1832f098ddef243ab5896c002411c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4cb0217ad248151bbf2df91bad377b8551b1832f098ddef243ab5896c002411c.exe
Resource
win10v2004-20220812-en
General
-
Target
4cb0217ad248151bbf2df91bad377b8551b1832f098ddef243ab5896c002411c
-
Size
201KB
-
MD5
a701e53f8e95139c34de1afef35da4e1
-
SHA1
fc31d28fb522e4ea017ec9537ff77ee433763e6b
-
SHA256
4cb0217ad248151bbf2df91bad377b8551b1832f098ddef243ab5896c002411c
-
SHA512
f71e2c1eb8a052721c2f6055073103a493921c936b653923f3dac74e1298d20f84d5f06aa510cd820136b9d03f6a41cadb078f61d62127967bba3c9b36a28eee
-
SSDEEP
6144:IJG8lxLuZqu1Z4rhzpgFA7NRy6hpuv6oNjm:IJGSxxgMXy6hu9jm
Malware Config
Signatures
Files
-
4cb0217ad248151bbf2df91bad377b8551b1832f098ddef243ab5896c002411c.exe windows x86
9d01042a1b43287af671aee5b57b39ab
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
LoadResource
Sleep
SizeofResource
GetProcAddress
LockResource
GetModuleHandleA
SetEndOfFile
GetCommandLineA
HeapSetInformation
HeapAlloc
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetFilePointer
RtlUnwind
MultiByteToWideChar
ReadFile
LoadLibraryW
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CloseHandle
CreateFileW
IsProcessorFeaturePresent
HeapSize
HeapReAlloc
LCMapStringW
GetStringTypeW
WriteConsoleW
GetProcessHeap
user32
MessageBoxW
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ