Static task
static1
Behavioral task
behavioral1
Sample
f46c1c714b50c3f11a659c77ec5f8e95f6dcf15dda485f6622c6e74af8f6b834.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f46c1c714b50c3f11a659c77ec5f8e95f6dcf15dda485f6622c6e74af8f6b834.exe
Resource
win10v2004-20220812-en
General
-
Target
f46c1c714b50c3f11a659c77ec5f8e95f6dcf15dda485f6622c6e74af8f6b834
-
Size
136KB
-
MD5
a298f680d8e328b45ca7ff4225566600
-
SHA1
192db23b55e9038496a8b6728f11ea2fc69fd45f
-
SHA256
f46c1c714b50c3f11a659c77ec5f8e95f6dcf15dda485f6622c6e74af8f6b834
-
SHA512
267378eb1f017609b437573f334f6b6cf0bd15ee4fb187fc1b36e236a8cf5994d28caee031479d7128afa59894aa75bc500edb3f31985e2675a9e78e760b627b
-
SSDEEP
3072:iPi3/PzN3RMj+IkFzMzE0hqpuVYfEMMTuJUQxh:V/PzkCAmuqb2uJUQxh
Malware Config
Signatures
Files
-
f46c1c714b50c3f11a659c77ec5f8e95f6dcf15dda485f6622c6e74af8f6b834.exe windows x86
9e01bdfe0b3ed68331f11f72251ba5cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesA
RemoveDirectoryA
FindClose
CreateDirectoryA
ResetEvent
GetStringTypeA
IsBadWritePtr
FindResourceA
GetExitCodeThread
IsValidCodePage
SetLastError
GetFileAttributesA
GetDriveTypeW
GetLocaleInfoA
VirtualProtect
GetModuleHandleA
MapViewOfFile
TlsGetValue
GetTickCount
GetProcessHeap
HeapSize
user32
LoadImageW
SetCursor
SetFocus
GetWindowTextW
IsDialogMessageA
LoadCursorA
PostMessageW
PeekMessageA
GetWindowLongW
GetCapture
DispatchMessageA
wsprintfW
IsWindow
msaatext
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE