Static task
static1
Behavioral task
behavioral1
Sample
d46b17a36cd0020ef0c11fe64f759d39651aa3daadb549077cf39e811496f960.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d46b17a36cd0020ef0c11fe64f759d39651aa3daadb549077cf39e811496f960.exe
Resource
win10v2004-20220812-en
General
-
Target
d46b17a36cd0020ef0c11fe64f759d39651aa3daadb549077cf39e811496f960
-
Size
93KB
-
MD5
fb68fe90cd8ec3a141a2134ceb16f96d
-
SHA1
3186b15d8351d8817a0d1ff89ec9ab0135fb567b
-
SHA256
d46b17a36cd0020ef0c11fe64f759d39651aa3daadb549077cf39e811496f960
-
SHA512
290ab5695e9d03c479ddfb75a3dfcb640b113a65c8e2c8850d2f603f11dbd849ebcef7c921bc69670cf3bbce1bc013438164eecff89751e17308032472995beb
-
SSDEEP
1536:za1aqWd6P6EGWvzsxZBkNeE1vjviB+qjtNFO:za1aqWd6P1nzAZusE1WHjZO
Malware Config
Signatures
Files
-
d46b17a36cd0020ef0c11fe64f759d39651aa3daadb549077cf39e811496f960.exe windows x86
1f8bc4e3f575c1113b6746acfbb79a55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_LoadImageA
ImageList_Create
ImageList_Remove
ImageList_DrawIndirect
ImageList_Copy
ImageList_DragShowNolock
ImageList_AddMasked
ImageList_DragMove
ImageList_LoadImage
ImageList_Destroy
ImageList_LoadImageW
ImageList_Read
ImageList_Merge
ImageList_BeginDrag
ImageList_GetImageRect
ImageList_GetImageInfo
ImageList_DrawEx
kernel32
lstrcpyA
GetCPInfo
lstrlenA
HeapFree
Sleep
GetFileSize
GetLocalTime
GetFileAttributesA
GetStringTypeA
CloseHandle
GetLastError
GetModuleHandleA
DeleteFileA
GetDateFormatA
lstrcpynA
GetStdHandle
user32
CloseWindow
CreateIcon
AppendMenuA
IsMenu
DrawIconEx
DrawTextA
GetWindowTextA
AppendMenuW
EndDialog
CopyImage
IsWindow
GetDC
LoadCursorA
DrawTextW
DialogBoxParamA
GetMenu
InsertMenuA
DrawIcon
advapi32
RegCreateKeyExW
RegEnumKeyW
RegReplaceKeyA
RegLoadKeyA
RegOpenKeyExA
RegLoadKeyW
RegEnumValueW
RegEnumKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
RegQueryValueExA
RegQueryValueA
RegFlushKey
RegOpenKeyExW
RegCreateKeyW
RegEnumValueA
RegOpenKeyW
Sections
.CsMi Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.gIltr Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kMcZR Size: 7KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.XbqHD Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ