Static task
static1
Behavioral task
behavioral1
Sample
48f3e40e1475e59060ebc5859e9033974500d5ebcc139738173e347d1f59e809.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
48f3e40e1475e59060ebc5859e9033974500d5ebcc139738173e347d1f59e809.exe
Resource
win10v2004-20220812-en
General
-
Target
48f3e40e1475e59060ebc5859e9033974500d5ebcc139738173e347d1f59e809
-
Size
88KB
-
MD5
530c39234cd3286de74ae42d34c86400
-
SHA1
18c8c156983f81b4ab84b7a7e390f5b08695de5f
-
SHA256
48f3e40e1475e59060ebc5859e9033974500d5ebcc139738173e347d1f59e809
-
SHA512
e19114758c5a98ccb101bacd2d9be0bcc7dd7c339403ba9e60bf63fa8057b58498fac39570adca0625692a9d984545326fb55ff2acab23f3d724be1f126a8f98
-
SSDEEP
1536:WgUj9zFOLGXi0mVoMYL4vUkIrDOzTE0u4UL0myNjkPUo/GSUWn:WgMOwmoMZvqfOznntVAUojUWn
Malware Config
Signatures
Files
-
48f3e40e1475e59060ebc5859e9033974500d5ebcc139738173e347d1f59e809.exe windows x86
9838f0022dd9e11901773cf7d15ad3b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetPrivateProfileIntW
MultiByteToWideChar
lstrlenW
GetCommandLineW
FlushFileBuffers
CloseHandle
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
SetConsoleCtrlHandler
ReadFile
SetEndOfFile
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetProcAddress
GetOEMCP
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
CreateFileW
SetStdHandle
LCMapStringW
HeapFree
HeapReAlloc
HeapAlloc
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
GetLastError
WideCharToMultiByte
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
GetACP
IsBadWritePtr
LCMapStringA
FreeEnvironmentStringsW
WriteFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
IsValidCodePage
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
IsValidLocale
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetFilePointer
user32
LoadStringW
shell32
CommandLineToArgvW
odbc32
ord119
ord72
ord12
ord3
ord111
ord4
ord13
ord16
ord110
ord2
ord1
ord15
ord150
ord107
ord14
ord139
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ