Static task
static1
Behavioral task
behavioral1
Sample
4a8a89d298abc94cf121ac05c2a246d560abe0b879ff54a22516439a3e35183c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4a8a89d298abc94cf121ac05c2a246d560abe0b879ff54a22516439a3e35183c.exe
Resource
win10v2004-20221111-en
General
-
Target
4a8a89d298abc94cf121ac05c2a246d560abe0b879ff54a22516439a3e35183c.exe
-
Size
6.7MB
-
MD5
1a3ee297041c712213175c433c424f47
-
SHA1
0044fc42b8e2c917e95c845d32014fd1bc188c5f
-
SHA256
4a8a89d298abc94cf121ac05c2a246d560abe0b879ff54a22516439a3e35183c
-
SHA512
18ddd45d00e8e1d1c2bf9b8b82d44deeb8a508409fb9038223ec60fe18a84bd4b27ddc35d7bd760dbf13a478e8d2a23cc418687be188df578e4d83de45a37489
-
SSDEEP
98304:rCTD5Mri+t9nwDlFQveHwXrgG/IXZMXr6vU2EsQ6I/VFdrQTg8MStd+O7ANXbmEl:7209w5Weu7/4uOvU6nCVQTjld+OkNLt
Malware Config
Signatures
Files
-
4a8a89d298abc94cf121ac05c2a246d560abe0b879ff54a22516439a3e35183c.exe.exe windows x86
11ea24073ee65343ee563e3160c77fde
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrlenA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
DestroyWindow
CharUpperBuffW
gdi32
GetObjectW
ole32
CoDecodeProxy
Sections
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.oP' Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.obQ Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 211KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE