Static task
static1
Behavioral task
behavioral1
Sample
46526d136f6e5c08e18edc29f83ba10cc50f0d7ca9b725be65e935be88792db7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
46526d136f6e5c08e18edc29f83ba10cc50f0d7ca9b725be65e935be88792db7.exe
Resource
win10v2004-20220812-en
General
-
Target
46526d136f6e5c08e18edc29f83ba10cc50f0d7ca9b725be65e935be88792db7
-
Size
1.1MB
-
MD5
45b78f48280e9765188cfb25e31841a0
-
SHA1
c19a5196230bbeff7d6826febb97b30802546110
-
SHA256
46526d136f6e5c08e18edc29f83ba10cc50f0d7ca9b725be65e935be88792db7
-
SHA512
68cff3a7609ea68f72716ba2279c62a46cfc725f2a5d29d0a52093223de02491a6f388989b2dbf0192b9ac0494938683223ecd7694cbb5195ea3207c800be22b
-
SSDEEP
24576:cXMzf2X25ss8hSPxLtzSk2E5MkkkSPzzt2fTXhtpd+bnJ:wg+4jLP5h37mkkvItMJ
Malware Config
Signatures
Files
-
46526d136f6e5c08e18edc29f83ba10cc50f0d7ca9b725be65e935be88792db7.exe windows x86
a999dcdb8a117b83bbd53aaab11b7889
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueW
mpr
WNetGetConnectionA
wsock32
WSACleanup
shell32
Shell_NotifyIconA
ole32
CoTaskMemFree
comctl32
_TrackMouseEvent
comdlg32
PrintDlgA
winspool.drv
OpenPrinterA
locks
DisableSysKeys
Sections
.text Size: 825KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 230KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE