Static task
static1
Behavioral task
behavioral1
Sample
45cf1128d496c09ded37bad7b957f25d6a1ad26cc65c3f8c3c7d6a373107b165.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
45cf1128d496c09ded37bad7b957f25d6a1ad26cc65c3f8c3c7d6a373107b165.exe
Resource
win10v2004-20220812-en
General
-
Target
45cf1128d496c09ded37bad7b957f25d6a1ad26cc65c3f8c3c7d6a373107b165
-
Size
1.0MB
-
MD5
2f363610e2390504e72ea63da193d1c5
-
SHA1
8552d30305e3342c4bfb821eab314448c6f3069f
-
SHA256
45cf1128d496c09ded37bad7b957f25d6a1ad26cc65c3f8c3c7d6a373107b165
-
SHA512
3e8189873de55a9ed9dda5391731b6f8479a1d2feb276ace9918278631360c3775c6d83b3ccb1f04a7209e09f7ea1cb939faf45de24b627c08e1e31d59430a58
-
SSDEEP
12288:QHDQGzytjywhOGG8VFPSyDEwr/tT1UorTc5Sf6bBuvVixC9x92ds5qoT1f4sC:Qqy7yS8Ek/tTtTcY6dkVJ9x92dLq4s
Malware Config
Signatures
Files
-
45cf1128d496c09ded37bad7b957f25d6a1ad26cc65c3f8c3c7d6a373107b165.exe windows x86
d65ad26254229a8fd75bc7c084099d63
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapSize
HeapReAlloc
HeapAlloc
OutputDebugStringW
RtlUnwind
WriteConsoleW
LCMapStringW
CloseHandle
GlobalUnlock
GlobalAlloc
GetTickCount
LoadLibraryExW
GlobalLock
GetStringTypeW
HeapFree
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetLastError
SetLastError
GetCurrentThreadId
MultiByteToWideChar
ExitProcess
GetModuleHandleExW
GetProcAddress
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
CreateFileW
user32
ShowWindow
DialogBoxParamA
CloseClipboard
GetWindowTextA
MessageBoxA
EmptyClipboard
GetDlgItem
OpenClipboard
SetWindowTextA
SetClipboardData
EndPaint
ScreenToClient
FillRect
LoadBitmapA
LoadIconA
SendMessageA
DrawEdge
BeginPaint
GetWindowLongA
CreateWindowExA
EndDialog
GetCursorPos
gdi32
SetTextColor
SetBkColor
CreatePatternBrush
ExtTextOutA
CreateSolidBrush
GetTextExtentPoint32A
winmm
PlaySoundA
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 958KB - Virtual size: 958KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ