Static task
static1
Behavioral task
behavioral1
Sample
45cd896b53bb69ea82f373de3683919652652a58b4f3f7ec7a570d43ac1769cf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
45cd896b53bb69ea82f373de3683919652652a58b4f3f7ec7a570d43ac1769cf.exe
Resource
win10v2004-20220812-en
General
-
Target
45cd896b53bb69ea82f373de3683919652652a58b4f3f7ec7a570d43ac1769cf
-
Size
10KB
-
MD5
e1aacc67c46563be95c25650b926d76f
-
SHA1
24b851c452821bff71012bbf4847cadaa2941201
-
SHA256
45cd896b53bb69ea82f373de3683919652652a58b4f3f7ec7a570d43ac1769cf
-
SHA512
c9cb131195c06f29cb929ec8028c93af22501863848b064198a27f543ad91e57c514ab74b8aafb65e33d7a55ba61cc9f658a974eac0e3ce91fa92daa9df6cd41
-
SSDEEP
96:o+K39Q3ZHfx+ecY03IQq7hZk3O+HnRWwrC1S/dD1xWe5y6dXtPon:opupHZ+eOIQq7hKe2Rxp1oItQn
Malware Config
Signatures
Files
-
45cd896b53bb69ea82f373de3683919652652a58b4f3f7ec7a570d43ac1769cf.exe windows x86
b7e5145558acc698fb8209a2966cbfb8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
lstrcpyA
FindClose
ReadFile
GlobalAlloc
CreateFileA
SetFilePointer
CloseHandle
MultiByteToWideChar
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
TlsAlloc
TlsFree
TlsGetValue
GetLastError
TlsSetValue
ExitProcess
GlobalFree
IsBadReadPtr
RtlUnwind
GetCurrentProcess
DuplicateHandle
GetStdHandle
InitializeCriticalSection
DeleteCriticalSection
FindNextFileA
GetEnvironmentStrings
FreeEnvironmentStringsA
WriteFile
DeleteFileA
msvcrt
_mbsrchr
_mbschr
user32
wsprintfA
MessageBoxA
ole32
OleInitialize
CoCreateInstance
Sections
.code Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 40KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ