Static task
static1
Behavioral task
behavioral1
Sample
46865f637c4cf6586a54e6d3ae0a05be2666e3ba70e53ccdc08643e73e93ed77.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
46865f637c4cf6586a54e6d3ae0a05be2666e3ba70e53ccdc08643e73e93ed77.exe
Resource
win10v2004-20220812-en
General
-
Target
46865f637c4cf6586a54e6d3ae0a05be2666e3ba70e53ccdc08643e73e93ed77
-
Size
276KB
-
MD5
15c99f18d41f535428582f13d4f2fdd0
-
SHA1
0290409f9ce6b3393f1f4f249e4592f585d92bed
-
SHA256
46865f637c4cf6586a54e6d3ae0a05be2666e3ba70e53ccdc08643e73e93ed77
-
SHA512
efba591bafa75b719fa528d2e03211def75303141587b773a2137f2b7d20a2d8b59574bfdcbf282d0bcc6ef8533cb678891dd1e58560d25178999c4e7ab59a06
-
SSDEEP
6144:t13Pw9DUZbPzg5nyAoEBulk6KDo+/M+cCnz7SVVaFWU62+0:HPw9wZbbHpkJDo+k+cCqkUULX
Malware Config
Signatures
Files
-
46865f637c4cf6586a54e6d3ae0a05be2666e3ba70e53ccdc08643e73e93ed77.exe windows x86
c35eb1183cdf9816fd88d7f4e81e9ef7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
CloseHandle
lstrcmpA
GetSystemInfo
GetCurrentProcess
HeapFree
SetUnhandledExceptionFilter
CreateFileA
GetACP
HeapAlloc
GetCurrentProcessId
MultiByteToWideChar
LoadLibraryW
OutputDebugStringA
GetSystemTimeAsFileTime
GetLocalTime
lstrlenW
GetProcessHeap
GetCPInfo
WideCharToMultiByte
lstrcpyW
SystemTimeToFileTime
GetTickCount
QueryPerformanceCounter
FindResourceW
olecli32
LeGetUpdateOptions
LeQueryType
LeQueryOpen
LeSetData
LeObjectConvert
LeQueryOutOfDate
LeQueryBounds
LeSaveToStream
LeObjectLong
LeSetBounds
LeReconnect
LeQueryProtocol
LeRelease
printui
vPrinterPropPages
ConstructPrinterFriendlyName
vQueueCreate
vServerPropPages
vDocumentDefaults
psapi
EnumProcessModules
EmptyWorkingSet
EnumPageFilesW
EnumPageFilesA
Sections
.text Size: 218KB - Virtual size: 217KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ