Static task
static1
Behavioral task
behavioral1
Sample
46b5dcadbc47af9b5d3e4fd8d25afc4cffa2814e8496ea272efb6d8adc16325c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
46b5dcadbc47af9b5d3e4fd8d25afc4cffa2814e8496ea272efb6d8adc16325c.exe
Resource
win10v2004-20220812-en
General
-
Target
46b5dcadbc47af9b5d3e4fd8d25afc4cffa2814e8496ea272efb6d8adc16325c
-
Size
393KB
-
MD5
6988f67c1abb51bb9896b33f0646a240
-
SHA1
22c3b1cf469d621f93d0b4f241b2d272e9456bf6
-
SHA256
46b5dcadbc47af9b5d3e4fd8d25afc4cffa2814e8496ea272efb6d8adc16325c
-
SHA512
dc84645ca95cc19c1be625c0e82eb28d196e969f9f17b7d9c576c020366ec9e1797360fc97b9df6ae418ec42d4622c62e13a3a07a60eef6f637ac6f46792f00b
-
SSDEEP
6144:lovB0qBOSUcHD2vD2RYMaYMoTQBDQBDIUTUxLbL/7O/7OEXLXcrXQha4stymu:loBptS6RexAqLbL/s8rXuRAy
Malware Config
Signatures
Files
-
46b5dcadbc47af9b5d3e4fd8d25afc4cffa2814e8496ea272efb6d8adc16325c.exe windows x86
cd3551d2a102b70792af0f3d4a04f475
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
kernel32
FindFirstFileA
lstrcpyA
GetCurrentDirectoryA
FindClose
lstrcmpiA
lstrcpynA
LoadResource
GetLastError
FindResourceA
GetSystemDefaultLCID
GetWindowsDirectoryA
GetModuleHandleA
GetVersionExA
CloseHandle
FreeLibrary
GetProcAddress
SetCurrentDirectoryA
LoadLibraryA
SetErrorMode
lstrlenA
GetModuleFileNameA
CreateMutexA
GetSystemDirectoryA
lstrcmpA
GetVersion
GetACP
WideCharToMultiByte
GetLocaleInfoW
GetCPInfo
ReadFile
SetEndOfFile
GetLocaleInfoA
CreateFileA
FlushFileBuffers
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
VirtualAlloc
LCMapStringW
LCMapStringA
HeapFree
GetOEMCP
OutputDebugStringA
GetStartupInfoA
GetCommandLineA
lstrcatA
ExitProcess
GetLocalTime
InterlockedDecrement
InterlockedIncrement
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapAlloc
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
VirtualFree
HeapCreate
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
WriteFile
InitializeCriticalSection
gdi32
GetDeviceCaps
user32
MessageBoxA
SetWindowPos
GetClassNameA
EnumWindows
GetWindowTextA
DialogBoxParamA
SetForegroundWindow
SetFocus
ShowWindow
GetDesktopWindow
GetDlgItem
SetDlgItemTextA
IsWindowEnabled
EndDialog
SetCursor
SendDlgItemMessageA
LoadCursorA
ExitWindowsEx
EnableWindow
GetAsyncKeyState
ReleaseDC
GetWindowRect
GetDC
LoadStringA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
comctl32
ord17
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 259KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 78KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE