Static task
static1
Behavioral task
behavioral1
Sample
46800d6bf05d1a6e5cd8541a1faa2dcf52f1edb03e77c4e7e9bf2eb59dadc1e4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
46800d6bf05d1a6e5cd8541a1faa2dcf52f1edb03e77c4e7e9bf2eb59dadc1e4.exe
Resource
win10v2004-20220812-en
General
-
Target
46800d6bf05d1a6e5cd8541a1faa2dcf52f1edb03e77c4e7e9bf2eb59dadc1e4
-
Size
284KB
-
MD5
c38cf93ca56613e60d7bd7c70430cd41
-
SHA1
58d25b30146c70e5eebe5416dff1b8a43cd4cad9
-
SHA256
46800d6bf05d1a6e5cd8541a1faa2dcf52f1edb03e77c4e7e9bf2eb59dadc1e4
-
SHA512
77debc105bd17b02a1845a76a7118ff7b700e85d15f112ff3dd7e4fa72af4f56b7628297f4d001dce28036c8aaf1d811143fda4a819eb3b4a4d4a11a3beb6354
-
SSDEEP
6144:Ym0LKXbQ8/8232uLyufNRkMr7ztXcJseeUc3mAOkC7vu:H0Lo/52uLyu16Mr7zlBU1J
Malware Config
Signatures
Files
-
46800d6bf05d1a6e5cd8541a1faa2dcf52f1edb03e77c4e7e9bf2eb59dadc1e4.exe windows x86
4aba2da6323b56198f27a7d4f1568bc4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
libcurl
curl_global_init
curl_easy_perform
curl_easy_setopt
curl_easy_cleanup
curl_easy_init
curl_global_cleanup
kernel32
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
FlushFileBuffers
ReadConsoleW
ReadFile
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetModuleFileNameA
HeapFree
InitializeCriticalSectionEx
HeapSize
GetLastError
HeapReAlloc
RaiseException
WritePrivateProfileStringA
HeapAlloc
DecodePointer
HeapDestroy
DeleteCriticalSection
GetProcessHeap
CreateDirectoryA
GetPrivateProfileStringA
MultiByteToWideChar
WideCharToMultiByte
SizeofResource
SetEnvironmentVariableW
LockResource
FindResourceExW
LoadResource
FindResourceW
WriteFile
GetCurrentThreadId
CloseHandle
GetLocalTime
UnmapViewOfFile
OpenFileMappingA
MapViewOfFile
GetTickCount
GetComputerNameA
GetConsoleCP
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetStdHandle
GetModuleFileNameW
ExitProcess
GetCommandLineW
WriteConsoleW
Sleep
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
WaitForSingleObjectEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EncodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
OutputDebugStringW
RtlUnwind
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
CreateFileW
GetFileType
shlwapi
PathRemoveExtensionA
PathFileExistsA
PathStripPathA
PathRemoveFileSpecA
PathAddBackslashA
iphlpapi
GetAdaptersInfo
SendARP
wsock32
ioctlsocket
Sections
.text Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ