Static task
static1
Behavioral task
behavioral1
Sample
f4366fd7657e4089aed51ee9da61e12c6bdfa71da5c91688d6e42a5112f1c550.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f4366fd7657e4089aed51ee9da61e12c6bdfa71da5c91688d6e42a5112f1c550.exe
Resource
win10v2004-20220812-en
General
-
Target
f4366fd7657e4089aed51ee9da61e12c6bdfa71da5c91688d6e42a5112f1c550
-
Size
800KB
-
MD5
ad54e8323243acacf8c20a81e10f5a45
-
SHA1
78cbab7491c88679c5dc51f5f95742f98b1ade87
-
SHA256
f4366fd7657e4089aed51ee9da61e12c6bdfa71da5c91688d6e42a5112f1c550
-
SHA512
1dfde134ddcaa7f1863f10c5c2eb6e728280249d0e58be4bdea30797f9a35135b01fe8e0d3ea9670590415cce229fa280c5d45a605ea32970f8f9bd62649b4b6
-
SSDEEP
12288:DHItCHRFLVUEH+16n51SzY8Kd35yeaGa/IrxS4xPESVm3sU0znsv4neXfxMJ:rItCHHJUEHP5EYyZk44FESswbW
Malware Config
Signatures
Files
-
f4366fd7657e4089aed51ee9da61e12c6bdfa71da5c91688d6e42a5112f1c550.exe windows x86
ea8c855bd435db1812b50484901ad1f0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InterlockedExchange
lstrcatA
LoadLibraryA
IsBadWritePtr
FormatMessageW
ReadFile
CreateEventA
LeaveCriticalSection
GetFileSize
GetExitCodeProcess
SetFileTime
lstrcpyA
GetStartupInfoW
CloseHandle
HeapSize
GetLastError
SetFileTime
GetModuleHandleA
InitializeCriticalSection
SetFileTime
HeapCreate
mstscax
DllRegisterServer
DllGetClassObject
DllUnregisterServer
DllCanUnloadNow
shell32
DragAcceptFiles
ExtractIconA
SHGetDiskFreeSpaceA
DuplicateIcon
DragFinish
SHFree
SHGetMalloc
SHGetSettings
DragQueryFileA
ShellMessageBoxW
StrChrA
ShellAboutA
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 112B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 787KB - Virtual size: 786KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ