Static task
static1
Behavioral task
behavioral1
Sample
c46be564e3a6e5d9eb9815787c2f99aee69d9121e2dff803f82eab7f2d549788.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c46be564e3a6e5d9eb9815787c2f99aee69d9121e2dff803f82eab7f2d549788.exe
Resource
win10v2004-20220812-en
General
-
Target
c46be564e3a6e5d9eb9815787c2f99aee69d9121e2dff803f82eab7f2d549788
-
Size
287KB
-
MD5
041e4b39f6cf49182d235758138cc9b0
-
SHA1
c19b5343baa6f1a2f6cd3dbf218e13805d35422d
-
SHA256
c46be564e3a6e5d9eb9815787c2f99aee69d9121e2dff803f82eab7f2d549788
-
SHA512
a1c02050b999fc8e469271fc147b154d1fbec9d111651a3a65275fd5f7d8d442e3259e499dd537215d7134bee28d7d2902cfb23954c1081cd1e0a7e4cae25aa1
-
SSDEEP
6144:fZQrXLbabTVW4r1llCvB3Nw57VJsCUDPWhMhg3+LC4rVMPFWlm:eOMuFCv2hUDPWh6+YVMPQw
Malware Config
Signatures
Files
-
c46be564e3a6e5d9eb9815787c2f99aee69d9121e2dff803f82eab7f2d549788.exe windows x86
8e5702b146ed3dc0ec2b585dbc0cc287
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SystemTimeToFileTime
SetLastError
GetProcessHeap
lstrcmpA
GetCurrentProcessId
FindResourceW
GetOEMCP
LoadLibraryA
HeapFree
MultiByteToWideChar
SetUnhandledExceptionFilter
GetTickCount
CloseHandle
lstrcpyW
HeapAlloc
GetLocalTime
CreateFileA
QueryPerformanceCounter
GetLocaleInfoW
WideCharToMultiByte
GetSystemTimeAsFileTime
GetCurrentProcess
fmifs
FormatEx
ComputeFmMediaType
DiskCopy
EnableVolumeCompression
Chkdsk
Extend
Format
w32topl
ToplScheduleCacheCreate
ToplSTHeapDestroy
ToplScheduleExportReadonly
ToplScheduleCreate
ToplSTHeapInit
ToplScheduleDuration
ToplScheduleCacheDestroy
ToplSTHeapExtractMin
Sections
.text Size: 275KB - Virtual size: 306KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nodata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ