Static task
static1
Behavioral task
behavioral1
Sample
0461073618cfbadde89cd71a7a8b38aef28dc521406d8436179ff078c83d1897.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0461073618cfbadde89cd71a7a8b38aef28dc521406d8436179ff078c83d1897.exe
Resource
win10v2004-20220812-en
General
-
Target
0461073618cfbadde89cd71a7a8b38aef28dc521406d8436179ff078c83d1897
-
Size
121KB
-
MD5
1304903d52f63364c4b96c106f55af62
-
SHA1
fa44fe4295f5c7c7ee8ad1ca183b9ddd9e8adf60
-
SHA256
0461073618cfbadde89cd71a7a8b38aef28dc521406d8436179ff078c83d1897
-
SHA512
601623a3808efcd7a6b168d8dfe4ae7149920feb267dc2708d4315159be2def5659cc8e9801d11dc3f3f3b0f6163fc1afa75518ff10ebed0ae3b43e3f24bd98e
-
SSDEEP
3072:SL0L9XHRSXWqSlbT7CHlVmUQIjcQPAoLSoz:SL0LK0bTWFwVI5pz
Malware Config
Signatures
Files
-
0461073618cfbadde89cd71a7a8b38aef28dc521406d8436179ff078c83d1897.exe windows x86
3fce64ba58a176f74f613fb1e6dfdfc8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetCurrentProcess
GetTickCount
GetProcessTimes
GlobalAlloc
ReadFile
GetModuleFileNameW
CreateFileW
GetProcAddress
GetLocalTime
LCMapStringW
LCMapStringA
GetLastError
HeapFree
HeapAlloc
GetStartupInfoW
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
WriteFile
GetStdHandle
GetModuleFileNameA
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
user32
LoadIconW
CreateWindowExW
AdjustWindowRect
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ