Static task
static1
Behavioral task
behavioral1
Sample
45f9eb8ef9060e821cde4134c94617ad47737d5628660b2bb155809f2a373e53.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
45f9eb8ef9060e821cde4134c94617ad47737d5628660b2bb155809f2a373e53.exe
Resource
win10v2004-20220812-en
General
-
Target
45f9eb8ef9060e821cde4134c94617ad47737d5628660b2bb155809f2a373e53
-
Size
111KB
-
MD5
05308660125a80efb97a7e430ab73197
-
SHA1
1e79dc152021761471c1849b9f9ebce60904f7ca
-
SHA256
45f9eb8ef9060e821cde4134c94617ad47737d5628660b2bb155809f2a373e53
-
SHA512
b3081717a29fdac89c5b17a64c868e8eddf26a392dfa18f769e56de343503132abc95d4ade8419ea9d6910268d9c455fa265efac78b7f1b382a597c3eef63309
-
SSDEEP
1536:ffusxQyAiWOgJOiSrIO8lxD7DoNk2OW8inlVdXvroajTnJm6PqgJ:+iAiWtJzqIO8zyV8iGajTnx
Malware Config
Signatures
Files
-
45f9eb8ef9060e821cde4134c94617ad47737d5628660b2bb155809f2a373e53.exe windows x86
b648488efe70f58d0bbde2a36813c1c1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCurrentDirectoryA
GetProcAddress
SetFileAttributesA
GetModuleHandleA
DeleteFileA
GetOEMCP
GetStartupInfoA
SetUnhandledExceptionFilter
VirtualQuery
GetSystemDefaultLCID
GetDriveTypeA
RtlMoveMemory
GetCurrentThread
WaitForSingleObject
OutputDebugStringA
SizeofResource
VirtualProtect
lstrlenW
InterlockedExchange
lstrcmpiW
GetSystemDirectoryW
GetTempPathA
GetLocaleInfoA
GlobalAlloc
GetEnvironmentVariableA
GetThreadLocale
LoadResource
InterlockedIncrement
WaitForMultipleObjects
msvcrt
tan
_XcptFilter
__p___initenv
__set_app_type
_controlfp
_except_handler3
_exit
_adjust_fdiv
__p__fmode
_initterm
__p__commode
__getmainargs
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Oxoc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE