Static task
static1
Behavioral task
behavioral1
Sample
d4546e2b602878df477d700d4882af5c3bb0b02d3befca44364a886abda63761.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d4546e2b602878df477d700d4882af5c3bb0b02d3befca44364a886abda63761.exe
Resource
win10v2004-20220901-en
General
-
Target
d4546e2b602878df477d700d4882af5c3bb0b02d3befca44364a886abda63761
-
Size
229KB
-
MD5
d0f49b5ac155ccdc41cd87628391e646
-
SHA1
55463f6acae49a11b7269204aa7bea83324e89d8
-
SHA256
d4546e2b602878df477d700d4882af5c3bb0b02d3befca44364a886abda63761
-
SHA512
27ba86405e560cbb571ba0029cbad647710b77d763b81cfb91139243980047e957700fcbccd33f9a4c3e5843dcde996d28f7b787b2d47eb538dfd6b15043cf75
-
SSDEEP
6144:YvAts602H6v5GH2Y7CwN6h2Hcj7s8NIFnz:Y4t3akHcwwh2v8NId
Malware Config
Signatures
Files
-
d4546e2b602878df477d700d4882af5c3bb0b02d3befca44364a886abda63761.exe windows x86
a5380836b6a5d5e56552a2470261af6a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
UnmapViewOfFile
SetConsoleCP
SetStdHandle
GetProcessHeap
GetVersion
FindFirstFileA
LCMapStringA
GetCPInfo
CreateFileW
LockResource
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WriteConsoleA
QueryPerformanceFrequency
HeapReAlloc
GetEnvironmentStrings
TlsSetValue
ReleaseMutex
GetOEMCP
GetVersionExA
GetCurrentThread
GetModuleHandleA
UnhandledExceptionFilter
GetCurrentProcessId
GetStartupInfoA
GetLastError
GetStringTypeA
FreeEnvironmentStringsW
lstrcmpW
InitializeCriticalSection
WaitForSingleObject
Sleep
VirtualProtect
HeapFree
HeapSize
RemoveDirectoryA
GetACP
InterlockedDecrement
GetCurrentThreadId
IsDebuggerPresent
GetTickCount
ExitProcess
FileTimeToSystemTime
HeapAlloc
user32
PtInRect
MapWindowPoints
SetScrollPos
SetScrollInfo
GetActiveWindow
msvcrt
_errno
exit
??3@YAXPAX@Z
_exit
??2@YAPAXI@Z
memcpy
malloc
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 185KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 942B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ