Static task
static1
Behavioral task
behavioral1
Sample
4f62fc5fd4fc4cf60287ff76f23ce1f3efee296427be5e2abb6eba9df569c7fb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4f62fc5fd4fc4cf60287ff76f23ce1f3efee296427be5e2abb6eba9df569c7fb.exe
Resource
win10v2004-20220812-en
General
-
Target
4f62fc5fd4fc4cf60287ff76f23ce1f3efee296427be5e2abb6eba9df569c7fb
-
Size
817KB
-
MD5
3ed47209e9ed3635b43c78d077582c30
-
SHA1
bd60b60ffcd4eaa332b8f739aae46514128f6546
-
SHA256
4f62fc5fd4fc4cf60287ff76f23ce1f3efee296427be5e2abb6eba9df569c7fb
-
SHA512
d64d5d3cf13b512ba15782183247b7c2f6da85af186d67600839841cae90bc57a5655bb5ed6f5f134c6fd31d109941e9174784995d5327adcbb107a54d387ac0
-
SSDEEP
24576:ZkxplC0jSd+YRNatEunGd3kRuVzzOW+0oxE:ZClR+BytWdlzf+V
Malware Config
Signatures
Files
-
4f62fc5fd4fc4cf60287ff76f23ce1f3efee296427be5e2abb6eba9df569c7fb.exe windows x86
76b979cbec5a1af1d5ba78a62c94e646
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpynA
lstrcatA
GetCurrentDirectoryA
OpenMutexW
lstrcpynA
lstrcmpA
GetFileSize
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
DeleteFileW
lstrcpynA
lstrcpynA
ReadFile
FormatMessageW
GetModuleHandleA
ReadConsoleA
lstrcpynA
SetThreadPriority
GetCurrentThreadId
lstrcpynA
GetFileType
VirtualFree
GetDiskFreeSpaceW
VirtualProtectEx
GetPrivateProfileIntA
CreateDirectoryW
GetCommandLineW
certcli
CAEnumFirstCA
CAFindByCertType
CAEnumNextCA
CADeleteCertType
Sections
.text Size: 17KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ