Static task
static1
Behavioral task
behavioral1
Sample
c46815c7f40344b5a256c00dc9cd3824827b6f297ab407c817fbdd1fcd42a9f3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c46815c7f40344b5a256c00dc9cd3824827b6f297ab407c817fbdd1fcd42a9f3.exe
Resource
win10v2004-20220812-en
General
-
Target
c46815c7f40344b5a256c00dc9cd3824827b6f297ab407c817fbdd1fcd42a9f3
-
Size
60KB
-
MD5
5e543319eacd09163856e073672d060f
-
SHA1
6e12d4bf8db78060ad42e2aef2213efe958e0945
-
SHA256
c46815c7f40344b5a256c00dc9cd3824827b6f297ab407c817fbdd1fcd42a9f3
-
SHA512
230a0980ee7ca41b8d3efc9199c4f7e6604921bafe540ca9479a1518621d63aea0b55486c1355cc7c829f2222554a5bb8ea97561b6eac32c34889eb59b9f942a
-
SSDEEP
768:LDhjgdzKPkd54IB0Bz6gti2GHchdPYClGro8Cd4jWFcDSYW4hoUDkYXCtOtdqicu:vhjyGBz6OGTCYr+Fc2Y7hoU8twdqiO
Malware Config
Signatures
Files
-
c46815c7f40344b5a256c00dc9cd3824827b6f297ab407c817fbdd1fcd42a9f3.exe windows x86
a9e1eadfdf7bdd86052c98c4e27902be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
VirtualQuery
GetDriveTypeW
GetModuleHandleA
CloseHandle
lstrlenA
HeapCreate
CreateEventW
GetCommandLineA
GetEnvironmentVariableA
GetCommandLineA
GlobalFlags
CloseHandle
GetStartupInfoA
GetFileAttributesA
GetConsoleTitleA
HeapDestroy
GetTimeFormatW
SetLastError
EnumResourceTypesA
advapi32
CreateProcessAsUserA
IsValidSid
IsValidSecurityDescriptor
RegDeleteValueA
RegCreateKeyExW
IsValidSid
RegQueryValueW
InitializeSid
IsValidSid
IsValidAcl
RegEnumKeyA
IsValidSid
IsValidSid
asycfilt
FilterCreateInstance
FilterCreateInstance
FilterCreateInstance
FilterCreateInstance
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mzmnzhd Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE