Static task
static1
Behavioral task
behavioral1
Sample
34debab146c86797d016e2149664df1748397da5ac0737cfdbad450a56de8f13.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
34debab146c86797d016e2149664df1748397da5ac0737cfdbad450a56de8f13.exe
Resource
win10v2004-20220812-en
General
-
Target
34debab146c86797d016e2149664df1748397da5ac0737cfdbad450a56de8f13
-
Size
78KB
-
MD5
46491f26a661f30ccbb02e2f848b452f
-
SHA1
5d3222f797b8abc71e623cadbc73e0c79989ea1b
-
SHA256
34debab146c86797d016e2149664df1748397da5ac0737cfdbad450a56de8f13
-
SHA512
4eb04d7c17af10d6f16d4600439b87c39e8bf84445941d03feda23f68d18eb01bac992132a581fbbb74b597d9fa283c9e9858d428aad5fe26122dbf2d498a642
-
SSDEEP
1536:IXqAiI8ffEcGzPhIe9grLga3sOuTV5EyFFjzCoh:0iIGoX9gnggsO6zEyPjzCoh
Malware Config
Signatures
Files
-
34debab146c86797d016e2149664df1748397da5ac0737cfdbad450a56de8f13.exe windows x86
dc05e604ab45b464c410dea34e7c66d3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetStringTypeExW
GetModuleHandleW
VerLanguageNameA
CreateMailslotA
MoveFileW
VirtualProtect
IsValidCodePage
VirtualFreeEx
GetLongPathNameA
GetPrivateProfileStringW
GetProcAddress
GetSystemWindowsDirectoryW
GetTickCount
GetLastError
SizeofResource
UnregisterWait
WritePrivateProfileStringA
GetThreadContext
MapViewOfFileEx
LoadLibraryA
CreateSemaphoreW
GetThreadLocale
GetModuleFileNameW
VirtualAlloc
IsBadReadPtr
CreateFileA
GetFileAttributesW
GetVolumePathNameW
CreateEventW
OutputDebugStringA
GetModuleHandleA
msvcrt
log10
isalnum
gmtime
_rotr
_fcloseall
_wspawnlp
__lconv_init
isspace
_rmtmp
__p__winminor
ispunct
?raw_name@type_info@@QBEPBDXZ
__iscsym
fflush
isprint
_lfind
_ismbslead
_c_exit
ungetwc
_initterm
memcpy
_pgmptr
rewind
fread
isupper
user32
PrivateExtractIconExW
RemoveMenu
DispatchMessageW
SetFocus
SetDlgItemTextW
InvalidateRect
LoadImageW
AdjustWindowRectEx
GetKeyState
ModifyMenuW
GetDlgItemTextW
CheckMenuItem
EnumDisplayMonitors
OpenClipboard
PostMessageW
LoadStringA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 513B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ