Static task
static1
Behavioral task
behavioral1
Sample
4734f6cd792df420b26a864fd71085393511fb4c6b0dd2017ebb3fd3897ec638.exe
Resource
win7-20221111-en
General
-
Target
4734f6cd792df420b26a864fd71085393511fb4c6b0dd2017ebb3fd3897ec638
-
Size
582KB
-
MD5
28a732a1d13cae5e3a500bd4c5f9c8e8
-
SHA1
4ea2adab7eaedffc9e9ccc5ef49185fa55588652
-
SHA256
4734f6cd792df420b26a864fd71085393511fb4c6b0dd2017ebb3fd3897ec638
-
SHA512
8559eda66ccdab68676217e8467f554a0704ce62bd258c3acee9683de96d21fcd181a2ecbbaac5e26d224c908b6f9ce92bbdcb1e495e332c86a890f7e86a40ce
-
SSDEEP
6144:F/cVnKFOhm+1B+lWEOZAoFPz0OhRtLbTqY3SaJg0Hfr5FbuZ6ViHJO:F8kqXZAoFQYRtn2YiaJt/r5FbnVeO
Malware Config
Signatures
Files
-
4734f6cd792df420b26a864fd71085393511fb4c6b0dd2017ebb3fd3897ec638.exe windows x86
52974b2775f5dc151a452daad0716215
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
GetProcAddress
lstrcmpA
GetCurrentThreadId
GetCurrentThread
gdiplus
GdipCreateMatrix3
advapi32
ElfRegisterEventSourceA
comdlg32
GetOpenFileNameA
Sections
.codes Size: 324KB - Virtual size: 323KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdatau Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ