Static task
static1
Behavioral task
behavioral1
Sample
48ed160797d610cb64c190ffc799630576a6392e1dfe6198982e22f37056ac0c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
48ed160797d610cb64c190ffc799630576a6392e1dfe6198982e22f37056ac0c.exe
Resource
win10v2004-20220812-en
General
-
Target
48ed160797d610cb64c190ffc799630576a6392e1dfe6198982e22f37056ac0c
-
Size
300KB
-
MD5
74210434bd399d78cdcad72efcfa61b0
-
SHA1
cb731d5acc866bf1e2d55f3f43c7ff84a02c678c
-
SHA256
48ed160797d610cb64c190ffc799630576a6392e1dfe6198982e22f37056ac0c
-
SHA512
1735441994f195820a3a5026dc1e54b9e725067ed3078d272a45be25c946abcbe3d66cf8c22e2096ae2f90f21a772ebb44a69a2e66413b68898aadaa016962c9
-
SSDEEP
6144:NWnZGZFXbmXAwm8wCrQ3y8Zv/PQ0eeo++3g4eJwpIeQKEL1jpN:8gNbAxsRRo0LojdeiIs
Malware Config
Signatures
Files
-
48ed160797d610cb64c190ffc799630576a6392e1dfe6198982e22f37056ac0c.exe windows x86
7676f29cd88ad7a4c684671e5ebdbb5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetLastError
GetFileAttributesA
FindResourceA
GetModuleHandleA
VirtualProtect
GetCommandLineA
GetStdHandle
GetProcessHeap
GetLocaleInfoA
MapViewOfFile
RemoveDirectoryA
FindClose
CancelIo
ReleaseMutex
ResetEvent
CreateMailslotW
HeapSize
IsBadWritePtr
GetDriveTypeW
CreateDirectoryA
GetExitCodeThread
user32
GetWindowTextW
SetCursor
LoadImageA
GetCapture
IsDialogMessageA
DestroyMenu
PeekMessageA
SetFocus
DispatchMessageA
wsprintfA
GetWindowLongW
PostMessageW
LoadCursorA
ipsmsnap
DllRegisterServer
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ