Static task
static1
Behavioral task
behavioral1
Sample
4031226b2d2f93beb0ceb391cdb633e8.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
4031226b2d2f93beb0ceb391cdb633e8.exe
Resource
win10v2004-20230220-en
General
-
Target
4031226b2d2f93beb0ceb391cdb633e8.exe
-
Size
6.6MB
-
MD5
4031226b2d2f93beb0ceb391cdb633e8
-
SHA1
f33873740206914aefffa85bbce0a209eb208f48
-
SHA256
0bb0a4d14663ad9e84769a88de1fc38c43b7ec66a6ff16228e7a1aadd5e5448d
-
SHA512
fb592e68f4cd10ed5a8f2d06f94ed18c5c7e0a442465a2d963d859dccf6f7ce19480316d24b1b6c916321eb36e2e54651c26adbee3f37b14860d49d08bccf5ba
-
SSDEEP
196608:j37uUXBBbMQ+hrEAkmJ7wqd/qsSk+CQVDx:+UXfb3++IKJsP+HP
Malware Config
Signatures
Files
-
4031226b2d2f93beb0ceb391cdb633e8.exe.exe windows x86
ff33eadca45c6385bfd8315e8bf376d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memcpy
kernel32
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CharUpperBuffW
Sections
.text Size: - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.=hz Size: - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ZS3 Size: 1024B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.a7k Size: 12.0MB - Virtual size: 12.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ