Static task
static1
Behavioral task
behavioral1
Sample
46669bbd6ee2edfc40db9d7eea1c2a3ba60faab081451f5a639041db83e750bb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
46669bbd6ee2edfc40db9d7eea1c2a3ba60faab081451f5a639041db83e750bb.exe
Resource
win10v2004-20220812-en
General
-
Target
46669bbd6ee2edfc40db9d7eea1c2a3ba60faab081451f5a639041db83e750bb
-
Size
33KB
-
MD5
0ac33d55a124b9c608f997241c7ca345
-
SHA1
ce140867ae6866eb01d88769f80f4061911434a0
-
SHA256
46669bbd6ee2edfc40db9d7eea1c2a3ba60faab081451f5a639041db83e750bb
-
SHA512
f4e90ae34a30d69eb2e00b7cf56173961d1063f805728aadbf0f360fae6805b803469f5e1630546e81a8e740d1c9b4b271a41496a6bee1308177184f0dd1f33b
-
SSDEEP
384:R0mciz67GpjlP0mwzwjCzYw3TLdhwVKNz2x3FR5Hq9bWt46NZu4BOEHH66ElBc8w:Pciz6vRwja0VDK9Kt46DuZ7xD
Malware Config
Signatures
Files
-
46669bbd6ee2edfc40db9d7eea1c2a3ba60faab081451f5a639041db83e750bb.exe windows x86
232e4c1c4af73ce444166b5226776ea6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_cexit
exit
_exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
_XcptFilter
wcslen
_stricmp
vswprintf
swprintf
_c_exit
??3@YAXPAX@Z
advapi32
RegCloseKey
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
kernel32
GetStartupInfoA
OutputDebugStringW
GetWindowsDirectoryW
GetCurrentProcessId
CreateProcessW
GetModuleHandleA
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
GetModuleFileNameW
user32
DefWindowProcW
wsprintfW
SetTimer
GetMessageW
TranslateMessage
DispatchMessageW
LoadCursorW
RegisterClassExW
CreateWindowExW
DestroyWindow
PostQuitMessage
LoadStringW
ole32
CoCreateInstance
CoUninitialize
CoInitialize
oleaut32
SysStringLen
SysAllocString
SysFreeString
shlwapi
SHDeleteKeyW
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ