Static task
static1
Behavioral task
behavioral1
Sample
4dbee0054b38db4136f2146511445c58de143f40.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4dbee0054b38db4136f2146511445c58de143f40.exe
Resource
win10v2004-20221111-en
General
-
Target
4dbee0054b38db4136f2146511445c58de143f40
-
Size
361KB
-
MD5
c61eb6346dba39184735797e3df73e47
-
SHA1
4dbee0054b38db4136f2146511445c58de143f40
-
SHA256
c659824afbed7d3b62e3653be70205d2156e383c8dda9f1099b0270bb27d8a17
-
SHA512
3b565a7d7dcb69868d99b867a8a059c758c306450dc72718da18effc3ead2b9f256caf9d43a363c9a351b41b2296b6c35279713e3b4bd67fd8429f490e9dfa0d
-
SSDEEP
6144:ZYSUIr+OXOBaU7iGYiJkaV2OFbC4XEqPTY/U1GvbYG+XtLETkzmo:ZYSUZxgU7iGYiJkaC2fPTY/U8vbYj54O
Malware Config
Signatures
Files
-
4dbee0054b38db4136f2146511445c58de143f40.exe windows x86
d8fbbfd561b090d32ca6a057677993eb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
OpenMutexA
SetEvent
CreateMutexA
SearchPathA
CloseHandle
GetCommandLineA
FreeConsole
VirtualProtect
SetLastError
GetModuleHandleA
FindClose
Sleep
DeleteCriticalSection
GetVersionExW
GetTickCount
FindResourceExA
CreateThread
GetLastError
TlsGetValue
advapi32
LsaFreeMemory
FreeSid
LsaClose
OpenEventLogA
RegCloseKey
LsaSetSecret
IsValidSid
RegEnumKeyExA
RegLoadKeyA
GetFileSecurityA
CloseTrace
EqualSid
RegCreateKeyExA
CloseEventLog
RegCloseKey
loghours
DirSyncScheduleDialog
DialinHoursDialogEx
DialinHoursDialog
LogonScheduleDialog
DirSyncScheduleDialogEx
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ