?E2P23@@YAXXZ
Static task
static1
Behavioral task
behavioral1
Sample
c46cd80f090379b407d47741aa041ea0b89023d9bf4f14ffad5ebb46a9ec34ef.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c46cd80f090379b407d47741aa041ea0b89023d9bf4f14ffad5ebb46a9ec34ef.exe
Resource
win10v2004-20220812-en
General
-
Target
c46cd80f090379b407d47741aa041ea0b89023d9bf4f14ffad5ebb46a9ec34ef
-
Size
348KB
-
MD5
0015d8a94637744d35c226947c2f13a0
-
SHA1
6ed7d557bd5f0e9a8fd7c04447d52032b2b23607
-
SHA256
c46cd80f090379b407d47741aa041ea0b89023d9bf4f14ffad5ebb46a9ec34ef
-
SHA512
8e7c7324e69b4e010577f8763a6ea99102d044b1d903581cf0654ceee2b4d7a76ddd7d12e0f5c47816ff7e16bad8879a05a832f8b3f8edc601be1f8d9a3ca6b6
-
SSDEEP
3072:g/i8Nr6keYEf3KTm8OOmSUd+adnvrbpnuJAY9a4gWiALZu3X7vKkOni5E63r:f80bYFmXxnuqY9d7VL2XzZ5E6b
Malware Config
Signatures
Files
-
c46cd80f090379b407d47741aa041ea0b89023d9bf4f14ffad5ebb46a9ec34ef.exe windows x86
c68783cefc157e578677182387716716
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
GetCurrentProcess
VirtualProtect
CloseHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LockFile
Sleep
GetLastError
GetTickCount
VirtualAlloc
TerminateProcess
RtlUnwind
IsDebuggerPresent
user32
GetDC
advapi32
CryptAcquireContextW
OpenThreadToken
ObjectCloseAuditAlarmW
SetEntriesInAclW
msvfw32
DrawDibEnd
ws2_32
recv
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.epl37 Size: 4KB - Virtual size: 17B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.epl32 Size: 4KB - Virtual size: 498B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xsg3 Size: 4KB - Virtual size: 440B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.eps8 Size: 4KB - Virtual size: 40B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 280KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ