Static task
static1
Behavioral task
behavioral1
Sample
d46783b3399e1afb2d3188ac7fe4447fcfc86b211254344d8ff7ea85cc786baf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d46783b3399e1afb2d3188ac7fe4447fcfc86b211254344d8ff7ea85cc786baf.exe
Resource
win10v2004-20220812-en
General
-
Target
d46783b3399e1afb2d3188ac7fe4447fcfc86b211254344d8ff7ea85cc786baf
-
Size
299KB
-
MD5
c2c821fca6baf80e1edaa615c7a9ad87
-
SHA1
a185fedacac48b83add5367e8a4324d3229a654c
-
SHA256
d46783b3399e1afb2d3188ac7fe4447fcfc86b211254344d8ff7ea85cc786baf
-
SHA512
01e80381f4e314184cdc24934d57b63b3c7cdbdc938ff2b3ba6a287ff3d5ee4479eb25af9d5ba0418c4bdf3bacfec745c3c4ad99a50ab529ad2645905be943da
-
SSDEEP
6144:Vr5b+lvRg6lLKKgbQ6yspU/YpVS8nSve502THUvE1Mxrp:7+l+uOKgb9bpU/6VSeSve502TGE1Mxrp
Malware Config
Signatures
Files
-
d46783b3399e1afb2d3188ac7fe4447fcfc86b211254344d8ff7ea85cc786baf.exe windows x86
a7c84a6d3edb93a7bd0b87dba50fc14d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueExA
RegDeleteValueA
RegSetValueExW
RegQueryValueExW
RegCreateKeyExA
RegOpenKeyExA
RegOpenKeyExW
RegCloseKey
kernel32
IsValidCodePage
CreateProcessA
SizeofResource
GetCurrentThreadId
GetModuleHandleW
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCPInfo
GetCommandLineW
LockResource
GetCurrentProcessId
GetEnvironmentStrings
FileTimeToLocalFileTime
lstrlenW
GlobalAlloc
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
UnmapViewOfFile
LCMapStringW
LoadLibraryExW
GetLastError
InterlockedIncrement
ExitProcess
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
GlobalLock
WaitForMultipleObjects
DuplicateHandle
FindFirstFileW
CreateFileMappingA
CompareStringA
lstrcpyA
FindFirstFileA
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
DeleteFileW
GetWindowsDirectoryA
DeleteFileA
GetFileSize
FreeLibrary
LoadLibraryA
GetVersionExA
HeapCreate
GetTickCount
QueryPerformanceCounter
GetOEMCP
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
LeaveCriticalSection
GetVersion
CreateEventW
GetConsoleMode
VirtualQuery
InterlockedDecrement
TerminateProcess
SetEnvironmentVariableA
MulDiv
GetStartupInfoA
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
MultiByteToWideChar
UnhandledExceptionFilter
LoadLibraryExA
GetModuleFileNameA
FlushFileBuffers
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
InitializeCriticalSection
SetLastError
GetCurrentThread
FormatMessageA
TlsGetValue
FindClose
LoadResource
GetEnvironmentVariableA
GetExitCodeProcess
FormatMessageW
LocalFree
SetEvent
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
SetStdHandle
FreeEnvironmentStringsW
SetErrorMode
CreateFileA
LocalAlloc
GetLocaleInfoA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
FindNextFileA
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetUserDefaultLCID
GetSystemDefaultLCID
GetUserDefaultLangID
VirtualFree
WriteConsoleA
Sleep
FindResourceA
VirtualAlloc
TlsAlloc
user32
GetSystemMetrics
KillTimer
SetFocus
ReleaseDC
CreateWindowExA
GetWindowLongA
IsIconic
LoadStringA
GetWindow
TranslateMessage
PeekMessageA
EnableWindow
SetCapture
ShowWindow
GetParent
EnableMenuItem
DestroyWindow
GetCursorPos
GetDC
DispatchMessageA
IsWindow
SetWindowPos
LoadBitmapA
PostQuitMessage
MoveWindow
GetKeyState
SystemParametersInfoA
InvalidateRect
wsprintfA
GetClientRect
SetCursor
GetWindowRect
PostMessageA
ReleaseCapture
SetWindowLongA
SetWindowTextA
CheckMenuItem
GetDlgItem
LoadCursorA
LoadIconA
SendMessageA
GetDesktopWindow
SetForegroundWindow
EndDialog
SetDlgItemTextA
MessageBoxA
GetMessageA
GetSysColor
gdi32
GetStockObject
DeleteDC
DeleteObject
BitBlt
SelectObject
msvcrt
_strcmpi
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 269KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ