Static task
static1
Behavioral task
behavioral1
Sample
c4a8b7e74483b43d57a0bcdf4a25fcb963f9b820699f4f973c0ef0dbd017a81f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c4a8b7e74483b43d57a0bcdf4a25fcb963f9b820699f4f973c0ef0dbd017a81f.exe
Resource
win10v2004-20221111-en
General
-
Target
c4a8b7e74483b43d57a0bcdf4a25fcb963f9b820699f4f973c0ef0dbd017a81f
-
Size
117KB
-
MD5
02831905e5812586946756ce325154c0
-
SHA1
9018cf90c44f5197ba726b561cf01d37f78e3aff
-
SHA256
c4a8b7e74483b43d57a0bcdf4a25fcb963f9b820699f4f973c0ef0dbd017a81f
-
SHA512
d5b4e5480da1091c63e5c21eeb9e403cc9ac3ad87e2d3a4a7f4e965d55199e093802cafbc3039419689676fc99645165f9f54a1d70f426a4c7014e229fe2a25e
-
SSDEEP
1536:CYPtTliDcoAeHN9DGe5CO6gRA0PcNy5RPPV+jYXdArePkMN8nBsDYzZQDbSgXqBk:3PtUPAsl5WgpcNYtLP2aYzZQDmgpKO
Malware Config
Signatures
Files
-
c4a8b7e74483b43d57a0bcdf4a25fcb963f9b820699f4f973c0ef0dbd017a81f.exe windows x86
5baf1c9e2a33e3cc14796760734f65d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDiskFreeSpaceA
WaitForMultipleObjects
lstrcmpA
lstrcmpiA
GetModuleHandleA
CreateDirectoryW
OpenMutexA
CreateEventA
CloseHandle
GetPriorityClass
GetPrivateProfileSectionW
SetEnvironmentVariableW
InterlockedExchange
SetFilePointer
GetExitCodeProcess
CloseHandle
GetDiskFreeSpaceA
GetPrivateProfileIntW
HeapCreate
GetFileAttributesA
GetPrivateProfileIntW
LoadLibraryExW
CloseHandle
certcli
CAEnumFirstCA
CADeleteCA
CADeleteCertType
CAEnumCertTypes
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE