_46g9rg
Static task
static1
Behavioral task
behavioral1
Sample
1acb38b1a9d970f9830f164af084b1f1a6b6e42f2f16511c5b63a0b5a3c028e2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1acb38b1a9d970f9830f164af084b1f1a6b6e42f2f16511c5b63a0b5a3c028e2.exe
Resource
win10v2004-20220812-en
General
-
Target
1acb38b1a9d970f9830f164af084b1f1a6b6e42f2f16511c5b63a0b5a3c028e2
-
Size
218KB
-
MD5
7c7cc790864d57139a592d2e1d528d10
-
SHA1
f840dd04ecec0405ab5fe781d7c1f2f22de742ed
-
SHA256
1acb38b1a9d970f9830f164af084b1f1a6b6e42f2f16511c5b63a0b5a3c028e2
-
SHA512
017d71cd30fa74f9b59f333b3e11a9c2803e706375d686122ff773dbc2ac7a4bc610dc0a23124cf3062b63f89f12d555650fa7b5505f34aa245cefa24dc42e28
-
SSDEEP
3072:3ZlipqpiXGGb1PqduFWcHwpoFm2KI1swNjcw0ZQhrcDWDOFxF1tc:3zqA6jqso7oFmrI15NjOeMZFxF
Malware Config
Signatures
Files
-
1acb38b1a9d970f9830f164af084b1f1a6b6e42f2f16511c5b63a0b5a3c028e2.exe windows x86
8c13f8e808de9bd7e2d1c4e05e9504e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
FindTextA
kernel32
GetDiskFreeSpaceA
GetCPInfo
GetTempPathA
VirtualAlloc
GetModuleHandleA
MoveFileExA
LoadLibraryExA
GetCommandLineW
lstrcpynA
GetProcAddress
SetEndOfFile
lstrcatA
GlobalAddAtomA
SetHandleCount
GetStringTypeW
GetModuleFileNameA
CreateThread
CompareStringA
IsBadHugeReadPtr
GlobalDeleteAtom
GetSystemDefaultLangID
FindClose
MulDiv
lstrcmpiA
LocalAlloc
GetVersion
Sleep
GetTickCount
WriteFile
WaitForSingleObject
GetThreadLocale
GetCommandLineA
LockResource
GetCurrentThreadId
GetCurrentThread
EnumCalendarInfoA
FormatMessageA
LocalReAlloc
MoveFileA
GlobalAlloc
GlobalFindAtomA
SetEvent
GetEnvironmentStrings
LoadResource
GetVersionExA
ExitProcess
LoadLibraryA
LocalFree
ReadFile
GetFileAttributesA
SizeofResource
HeapDestroy
InitializeCriticalSection
lstrlenW
FindFirstFileA
user32
GetWindowThreadProcessId
GetMenu
InsertMenuItemA
GetSysColorBrush
IsWindowEnabled
GetWindowTextA
oleaut32
SafeArrayUnaccessData
SafeArrayCreate
VariantChangeType
Exports
Exports
Sections
CODE Size: 196KB - Virtual size: 195KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.apdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ