Static task
static1
Behavioral task
behavioral1
Sample
c246511dfccc5a8820a026deb28e2daa7896f068a8525bf7262a6d8517ec1a37.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c246511dfccc5a8820a026deb28e2daa7896f068a8525bf7262a6d8517ec1a37.exe
Resource
win10v2004-20220812-en
General
-
Target
c246511dfccc5a8820a026deb28e2daa7896f068a8525bf7262a6d8517ec1a37
-
Size
302KB
-
MD5
cac56b1b63154cf3b8722b390f3e83e7
-
SHA1
b946ad7585eea72f471de1cbb83daf2052e4b2fd
-
SHA256
c246511dfccc5a8820a026deb28e2daa7896f068a8525bf7262a6d8517ec1a37
-
SHA512
58ac2e79ecd945b1c391d83db62362c6825c70a6fed3862b441fdbfbff3c27cb9eabcf2dcdbe01847591f17d38da9cf9842d15e5c345c69468f5b8dd88049d44
-
SSDEEP
6144:ZGmljqHUdZJwvRbkxt8aFvMdnGuH6n/fU/LjvVGaA9sp33kbH5KQZ2zhB+wzsfmF:ZGmBuaHUa+hqfmQs1ydr6JV
Malware Config
Signatures
Files
-
c246511dfccc5a8820a026deb28e2daa7896f068a8525bf7262a6d8517ec1a37.exe windows x86
37d7a46b46b6c50a9e306e0bc663e848
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
GetUserDefaultLCID
HeapCreate
SetHandleCount
GetProcAddress
HeapDestroy
HeapReAlloc
TlsAlloc
CompareStringA
GetOEMCP
GetCurrentProcessId
TlsGetValue
GetLogicalDriveStringsW
GetCurrentThread
TlsSetValue
WriteFile
HeapSize
CloseHandle
UnhandledExceptionFilter
LCMapStringA
GetEnvironmentStringsW
VirtualProtect
DeleteCriticalSection
GetStringTypeW
IsBadWritePtr
GlobalSize
GetLocaleInfoW
RtlZeroMemory
GetProfileIntW
ExitProcess
GetTickCount
GetNumberFormatW
TlsFree
HeapFree
GetACP
GetModuleFileNameA
GetStdHandle
LoadLibraryA
QueryPerformanceCounter
FreeEnvironmentStringsA
VirtualAlloc
ExpandEnvironmentStringsW
CompareStringW
WideCharToMultiByte
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
RtlUnwind
GetCPInfo
GetDateFormatA
GetLastError
LeaveCriticalSection
VirtualFree
GetVersionExA
EnterCriticalSection
GetSystemTimeAsFileTime
GetCommandLineA
OpenFileMappingW
GetProcAddress
GetCommandLineW
GetEnvironmentStrings
OpenWaitableTimerA
SetEnvironmentVariableA
IsValidCodePage
GetStringTypeA
InterlockedIncrement
GetFileType
MultiByteToWideChar
SetEvent
GetTimeZoneInformation
SetLastError
GetLocaleInfoA
UnlockFileEx
InterlockedExchange
GetStartupInfoA
GetModuleFileNameW
EnumSystemLocalesA
IsValidLocale
VirtualLock
FreeEnvironmentStringsW
InitializeCriticalSection
GetTimeFormatA
HeapAlloc
LCMapStringW
WaitForMultipleObjectsEx
GetLongPathNameW
GetSystemInfo
VirtualQuery
GetModuleHandleA
comdlg32
ChooseColorW
ReplaceTextW
GetFileTitleA
GetSaveFileNameW
ChooseFontW
ReplaceTextA
PrintDlgA
GetOpenFileNameW
GetOpenFileNameA
GetSaveFileNameA
Sections
.text Size: 147KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ