Static task
static1
Behavioral task
behavioral1
Sample
4e6afd149fbbb83416ebba00b7b7dd157b8617203a02c1ce9e9c731dae2874ff.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4e6afd149fbbb83416ebba00b7b7dd157b8617203a02c1ce9e9c731dae2874ff.exe
Resource
win10v2004-20220812-en
General
-
Target
4e6afd149fbbb83416ebba00b7b7dd157b8617203a02c1ce9e9c731dae2874ff
-
Size
288KB
-
MD5
26a1d926f65c2e846e54488aeeae05d0
-
SHA1
26de63fde87721bd01bdd4f4e61dbea62d242aca
-
SHA256
4e6afd149fbbb83416ebba00b7b7dd157b8617203a02c1ce9e9c731dae2874ff
-
SHA512
fde25b9c1613ed9a54bff54dcac36e00ee4cd0018c3f1c0e7a25afaad36d38c866fa4ec4725519caf2570397774c3194f936c52f351db8903f1bc41318f9a44c
-
SSDEEP
6144:PQbS899lfzXe7gog1dOXRQu+ZE7O3yQA4Qvr9O7ANR28Fq:PQbd9rje8WSu+/314ro6R28w
Malware Config
Signatures
Files
-
4e6afd149fbbb83416ebba00b7b7dd157b8617203a02c1ce9e9c731dae2874ff.exe windows x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
mma5z3j. Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pvn59jew Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0hpx1kwu Size: - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vqzdcka. Size: 275KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE