Static task
static1
Behavioral task
behavioral1
Sample
46bd96299ed3decd95e5f08ec22b7a34b9e3807b277a1d968fca6fb9b4287ab9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
46bd96299ed3decd95e5f08ec22b7a34b9e3807b277a1d968fca6fb9b4287ab9.exe
Resource
win10v2004-20220901-en
General
-
Target
46bd96299ed3decd95e5f08ec22b7a34b9e3807b277a1d968fca6fb9b4287ab9
-
Size
310KB
-
MD5
433d8748f4e5b28b5d2eeec83699733c
-
SHA1
60eefd2af76dedb9e904b90f9d66c9d1383269ef
-
SHA256
46bd96299ed3decd95e5f08ec22b7a34b9e3807b277a1d968fca6fb9b4287ab9
-
SHA512
3adeb3670979ec6b4bb85690c9526d3f5b5be63e2d368a6b94e37ec82ac8803b2bead50d561176f25209614fc4fbf4ee40f81aeca2c580d3ff4f562fac6c8b34
-
SSDEEP
6144:cgsS02/oPbqhjCVTS/EGQalR+pSXSYZaKYxzXpztpz6cI0:+S0YI5FS/vQxBYQtzRVI0
Malware Config
Signatures
Files
-
46bd96299ed3decd95e5f08ec22b7a34b9e3807b277a1d968fca6fb9b4287ab9.exe windows x86
11aba3d43c1f17c4aef81a2d5ab59743
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomA
GetDriveTypeA
RaiseException
GetACP
GlobalUnlock
VirtualProtect
GetStdHandle
HeapCreate
GlobalDeleteAtom
EnterCriticalSection
GlobalFree
FileTimeToLocalFileTime
GetLocaleInfoA
LockResource
Sleep
CloseHandle
SetErrorMode
GetLastError
SetConsoleOutputCP
InterlockedExchange
LoadLibraryExA
user32
DrawTextA
GetWindow
GetActiveWindow
ClipCursor
GetFocus
BeginPaint
DrawEdge
GetParent
GetWindowTextA
ValidateRect
GetClassNameA
GetMenuItemInfoA
GetCursorPos
OemToCharW
ReleaseDC
IsIconic
ShowWindow
EndPaint
SetForegroundWindow
httpapi
HttpRemoveUrl
HttpCreateHttpHandle
HttpTerminate
HttpInitialize
HttpAddUrl
wldap32
ldap_add
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ