Static task
static1
Behavioral task
behavioral1
Sample
46b08a0aca04a4b7beefde2319cddb6e64590c1b20d836fd47f6b468d93a3c4a.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
46b08a0aca04a4b7beefde2319cddb6e64590c1b20d836fd47f6b468d93a3c4a.exe
Resource
win10v2004-20220414-en
General
-
Target
46b08a0aca04a4b7beefde2319cddb6e64590c1b20d836fd47f6b468d93a3c4a
-
Size
344KB
-
MD5
430117ef918aab7cce9882152852ec83
-
SHA1
0c63fe6dc7fab7aa91f5d6f12c753677c141e2ff
-
SHA256
46b08a0aca04a4b7beefde2319cddb6e64590c1b20d836fd47f6b468d93a3c4a
-
SHA512
4ea134f8761d2f8ae518f56eca625e2f926759ffa9e378b9dd664b23b91cb063baba00e5880359df83e3c112ac7c970c0be081739eab21c2b5b6771cd83effdd
-
SSDEEP
6144:oUDRCDJvE9hxqF0xIFiH8m4uarMotJ2AJQYS5174a:h6Jv0hVouarMoOA9+4a
Malware Config
Signatures
Files
-
46b08a0aca04a4b7beefde2319cddb6e64590c1b20d836fd47f6b468d93a3c4a.exe windows x86
e1f79d7f9714452742d1fea0fa7190ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_wtol
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_assert
_swab
_onexit
__dllonexit
wcscpy
mpr
WNetConnectionDialog1A
WNetGetProviderNameA
WNetCancelConnectionA
WNetCancelConnection2A
WNetAddConnection2A
advapi32
CreateServiceA
SetServiceStatus
GetTrusteeTypeA
BuildExplicitAccessWithNameA
user32
SendNotifyMessageA
CreateIconFromResource
SendMessageA
netapi32
NetServerEnum
oleaut32
VarCat
LPSAFEARRAY_UserSize
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileW
VerInstallFileA
VerFindFileA
VerInstallFileW
VerQueryValueW
VerQueryValueA
mfc42
ord4698
ord1011
ord2725
ord5302
ord1098
ord3346
ord2396
ord1059
ord1089
ord5307
ord5731
ord1057
ord2554
ord4486
ord1038
ord5714
ord1015
ord2982
ord1032
ord1576
ord6375
ord561
ord3738
ord4424
ord3259
ord4465
ord3922
ord1168
ord1056
ord4080
ord3079
ord3825
ord3831
ord3830
ord1061
ord2976
ord815
ord3081
ord2985
ord3262
ord1026
Sections
.text Size: 180KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ