Static task
static1
Behavioral task
behavioral1
Sample
45a9eb8ca92d4fa5304663641d731c91dc6a3996b00f1aa78c064462ecafed85.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
45a9eb8ca92d4fa5304663641d731c91dc6a3996b00f1aa78c064462ecafed85.exe
Resource
win10v2004-20220812-en
General
-
Target
45a9eb8ca92d4fa5304663641d731c91dc6a3996b00f1aa78c064462ecafed85
-
Size
440KB
-
MD5
6e77486ac000ef8aee8d57f2e39fa5a0
-
SHA1
60792cf3b47a98b02de5e978caeb15f56fd7ea19
-
SHA256
45a9eb8ca92d4fa5304663641d731c91dc6a3996b00f1aa78c064462ecafed85
-
SHA512
e6e5f7c10113849a37155534f0dabd222e79156f371063fdd37227028b765083ca3ad3d07eb25d2f8da17284ab48d6447171ca120d0ed134ea623bfe1a8f1eac
-
SSDEEP
6144:U3VbGWA2bW4dH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uTs6gnx77iZG0:CVU492EB0NxDIBuOFe7/uTsY
Malware Config
Signatures
Files
-
45a9eb8ca92d4fa5304663641d731c91dc6a3996b00f1aa78c064462ecafed85.exe windows x86
3a03ed78bc65481f13afc2b8f4cd4b86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateThread
UnregisterConsoleIME
RequestDeviceWakeup
GlobalMemoryStatusEx
GlobalFree
LZCloseFile
_hwrite
FindResourceExW
ReadFileEx
Sleep
GetCommModemStatus
GetTempPathA
SetCalendarInfoW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 271KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
camztlf Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vryeypb Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE