Static task
static1
Behavioral task
behavioral1
Sample
646d54260c6b84d4e9e72655ff09a74acdeb281fd0e672d28cb126e9efc737d9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
646d54260c6b84d4e9e72655ff09a74acdeb281fd0e672d28cb126e9efc737d9.exe
Resource
win10v2004-20220812-en
General
-
Target
646d54260c6b84d4e9e72655ff09a74acdeb281fd0e672d28cb126e9efc737d9
-
Size
76KB
-
MD5
a46ec19fbaaabe997619cf44dda1dbc4
-
SHA1
acf793d52a2b30dda0861708f897e9f08f1e8fd3
-
SHA256
646d54260c6b84d4e9e72655ff09a74acdeb281fd0e672d28cb126e9efc737d9
-
SHA512
357a5a7266d94e41a0eec5a050ef79858250c1e46c58272fc950f5837814802ab90f437b8ea433809544bc84d1e1796d350e4365cdbdc35c03b2c2c3a6bc3fde
-
SSDEEP
1536:BzqoShZpiLq9td3ylf+hptaYTZ31rM8kJ4gbPudW9vTtW+9jK92W7F5c9Ap0brfS:Gdi1+FaWZ31r5q5bPus74+tK15gAm4km
Malware Config
Signatures
Files
-
646d54260c6b84d4e9e72655ff09a74acdeb281fd0e672d28cb126e9efc737d9.exe windows x86
678023272bb0754f7e65af70445bc7ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
_CIacos
memcpy
strncpy
strlen
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
LoadLibraryA
GetProcAddress
CloseHandle
InitializeCriticalSection
WriteFile
HeapFree
ReadFile
HeapReAlloc
HeapAlloc
Sections
.code Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ