Static task
static1
Behavioral task
behavioral1
Sample
46e647bc1659fb9d27ea16e121d2e34732bae92a1a899de0f9d338991d903088.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
46e647bc1659fb9d27ea16e121d2e34732bae92a1a899de0f9d338991d903088.exe
Resource
win10v2004-20220901-en
General
-
Target
46e647bc1659fb9d27ea16e121d2e34732bae92a1a899de0f9d338991d903088
-
Size
84KB
-
MD5
2101fa957127a222c2b4677a3c725211
-
SHA1
5bc07c1e77828adcc975a90084e16371e7be5166
-
SHA256
46e647bc1659fb9d27ea16e121d2e34732bae92a1a899de0f9d338991d903088
-
SHA512
ef9002731b65f8e89fadfa90c53c05cf8b9e5f9c7f3c1b1ca8dc2bca00d87644fe93a18000cb9d15eb70256713566df60c72e6c301bdf462a34704d2344dfabd
-
SSDEEP
1536:piRuLF4NSxI7HFd323cB/FLvkhlvW5SsjNuqO95fH+V:piU2vzFd323cEOMqAFH
Malware Config
Signatures
Files
-
46e647bc1659fb9d27ea16e121d2e34732bae92a1a899de0f9d338991d903088.exe windows x86
c20eef17ef02219de8c1fbe992ddd66d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
GetSysColorBrush
GetSysColor
EnumWindows
SetWindowPos
EqualRect
GetScrollPos
GetMessageA
EnableMenuItem
UnhookWindowsHookEx
FrameRect
SetWindowTextA
GetSubMenu
PostQuitMessage
kernel32
RtlUnwind
GetCurrentProcessId
VirtualAllocEx
GetTimeZoneInformation
ExitProcess
GetOEMCP
GetACP
QueryPerformanceCounter
GetTickCount
GetThreadLocale
FileTimeToSystemTime
GetFileAttributesA
InterlockedExchange
GetSystemTime
GetTempPathA
SetUnhandledExceptionFilter
GetStartupInfoA
gdi32
SelectClipPath
ExcludeClipRect
FillRgn
DPtoLP
CreateICW
SetViewportExtEx
CreateCompatibleBitmap
GetMapMode
CopyEnhMetaFileA
ole32
CoCreateInstance
DoDragDrop
CoInitializeSecurity
CoRevokeClassObject
StgOpenStorage
OleRun
CoInitialize
StringFromGUID2
CoTaskMemRealloc
advapi32
RegCreateKeyA
AdjustTokenPrivileges
RegQueryValueExW
FreeSid
QueryServiceStatus
GetSecurityDescriptorDacl
RegCreateKeyExW
CheckTokenMembership
CryptHashData
GetUserNameA
msvcrt
_fdopen
_flsbuf
strncpy
fflush
puts
iswspace
_strdup
fprintf
__getmainargs
_lock
__initenv
strcspn
__setusermatherr
_CIpow
raise
_mbscmp
signal
strlen
comctl32
ImageList_LoadImageW
ImageList_DrawEx
ImageList_GetIcon
ImageList_SetIconSize
ImageList_DragEnter
ImageList_ReplaceIcon
ImageList_Write
CreatePropertySheetPageA
InitCommonControls
ImageList_Destroy
ImageList_GetIconSize
ImageList_LoadImageA
ImageList_GetBkColor
shell32
DragQueryFileW
ShellExecuteEx
ExtractIconExW
SHGetPathFromIDList
DragAcceptFiles
ShellExecuteW
CommandLineToArgvW
SHBrowseForFolderA
DoEnvironmentSubstW
ExtractIconW
DragQueryFileA
oleaut32
VariantCopy
SafeArrayGetUBound
SafeArrayPutElement
SafeArrayRedim
SafeArrayCreate
SysReAllocStringLen
SafeArrayUnaccessData
SafeArrayPtrOfIndex
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ