Static task
static1
Behavioral task
behavioral1
Sample
48bb5383bd17d2cf28299eec63750194433b9fa5a1cdf9c2c8588f383234f131.exe
Resource
win7-20220812-en
General
-
Target
48bb5383bd17d2cf28299eec63750194433b9fa5a1cdf9c2c8588f383234f131
-
Size
82KB
-
MD5
084a612277efa64addb1212f88715970
-
SHA1
142379c60e19467844bc03e3344e23ee5e4c49e0
-
SHA256
48bb5383bd17d2cf28299eec63750194433b9fa5a1cdf9c2c8588f383234f131
-
SHA512
287422b36dcb1d03d2972fb47ffdab8dc8bc3707d89cf80849dc2242e5bd52da3b02e7d569cb4ff7271b2fa89974ef1bc399f90d9917cf0f964ddcc33697d413
-
SSDEEP
1536:4do9LFg+2wIrqWuSF2it8CeySeVU70oXti/h+hKKqotwKzarZ/s:4do9LFg+2wI+xSF2iZeyhVUZOhEw7s
Malware Config
Signatures
Files
-
48bb5383bd17d2cf28299eec63750194433b9fa5a1cdf9c2c8588f383234f131.exe windows x86
023353eca5f1b57e86427a2ee77b1edf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
TerminateProcess
MultiByteToWideChar
FreeEnvironmentStringsA
LoadLibraryA
GetProcAddress
VirtualAlloc
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapAlloc
HeapFree
WriteFile
RtlUnwind
VirtualFree
HeapCreate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DeleteFileA
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
HeapDestroy
GetCPInfo
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
user32
DispatchMessageA
TranslateMessage
GetMessageA
PostMessageA
ShowWindow
CreateWindowExA
MessageBoxA
ExitWindowsEx
DefWindowProcA
DestroyWindow
PostQuitMessage
RegisterClassExA
LoadIconA
LoadCursorA
advapi32
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE