Static task
static1
Behavioral task
behavioral1
Sample
46bb0dfc138ae9845e70cf2533e6e2b58da8a8f94958a348762601040c6cdde5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
46bb0dfc138ae9845e70cf2533e6e2b58da8a8f94958a348762601040c6cdde5.exe
Resource
win10v2004-20220901-en
General
-
Target
46bb0dfc138ae9845e70cf2533e6e2b58da8a8f94958a348762601040c6cdde5
-
Size
278KB
-
MD5
29ea4e756d42c70ff0aca08daf2aa236
-
SHA1
5dcac4a12228a8b2224ce78f09a5ef6e7a60d04c
-
SHA256
46bb0dfc138ae9845e70cf2533e6e2b58da8a8f94958a348762601040c6cdde5
-
SHA512
aeed784e853d69915f84a57b82b46501a1dc965b71fadbd47a5307d8e08d1fc7df537586ba8b1c50b1dd84064c10556d49be28c87cc694ea6d2cd8b5483fe78d
-
SSDEEP
6144:B92wWAPa18zDSn7NK8qqRh/1l+ifDk4TP7PHPqLwyDl/3is5IC1snV:GwWAP8ZK8qS+4DBTPvqMWas6ksV
Malware Config
Signatures
Files
-
46bb0dfc138ae9845e70cf2533e6e2b58da8a8f94958a348762601040c6cdde5.exe windows x86
4632022ed20235c83b1bd373ca563cd5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetFileType
SetFileAttributesW
GetFileAttributesA
ReadFile
EnterCriticalSection
SetLastError
GetDriveTypeA
GetModuleHandleA
ExitThread
GetCommandLineA
GlobalSize
GetEnvironmentVariableW
MapViewOfFile
lstrlenA
GetFileTime
GetCurrentDirectoryW
HeapCreate
HeapFree
SetLastError
FindClose
WaitForMultipleObjects
GlobalLock
GetCommandLineW
IsBadReadPtr
uxtheme
DrawThemeEdge
GetThemeTextExtent
CloseThemeData
CloseThemeData
GetWindowTheme
GetThemeBool
GetThemeColor
SetWindowTheme
GetThemeEnumValue
IsThemeActive
GetThemeTextMetrics
OpenThemeData
DrawThemeBackground
dispex
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE