Static task
static1
Behavioral task
behavioral1
Sample
46480650e59f9f18e3bfe4c9f32212eff2ecb600612c2482344914f64755bccc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
46480650e59f9f18e3bfe4c9f32212eff2ecb600612c2482344914f64755bccc.exe
Resource
win10v2004-20221111-en
General
-
Target
46480650e59f9f18e3bfe4c9f32212eff2ecb600612c2482344914f64755bccc
-
Size
216KB
-
MD5
3025e15206e9c184bb79891f53a784a0
-
SHA1
679eefb645728a8ab6103a3faadb8b2ac15e0f14
-
SHA256
46480650e59f9f18e3bfe4c9f32212eff2ecb600612c2482344914f64755bccc
-
SHA512
3b71bfc6f34dd21258b28a0392e7c4df5def02a9cd84afe14668abbd20e8c3ee51fa9bda283160484cf3126571e511e475adcf7a9ea64d642abcbaec28060d52
-
SSDEEP
6144:P7Fv+1AnqWa3mK9pH5nBHV4+GI133udyNY:TF+ua5pl9V4+F1Hu4NY
Malware Config
Signatures
Files
-
46480650e59f9f18e3bfe4c9f32212eff2ecb600612c2482344914f64755bccc.exe windows x86
dda70cdff98b8ca1b8cdf3dc3c76569b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msnetobj
DllUnregisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
kernel32
GetThreadPriority
ReleaseSemaphore
MulDiv
GetCurrentThread
CreateThread
lstrcpyW
IsBadCodePtr
QueryPerformanceCounter
GetFileSize
SetThreadPriority
GetProfileIntA
CloseHandle
WaitForMultipleObjects
GetFileAttributesW
GetDiskFreeSpaceW
FreeLibrary
GetQueuedCompletionStatus
lstrcmpiW
lstrcpyA
CreateEventW
LeaveCriticalSection
lstrcmpW
WaitForSingleObject
SetUnhandledExceptionFilter
GetCurrentProcess
GetEnvironmentStringsW
DeleteFileW
InterlockedIncrement
GetFullPathNameW
ResetEvent
InterlockedExchange
HeapFree
GlobalAlloc
HeapAlloc
GetSystemInfo
GetTimeZoneInformation
CreateFileW
GlobalLock
SetFilePointer
GetCurrentProcessId
GetTickCount
GetModuleFileNameA
GlobalMemoryStatus
lstrcpynW
IsBadWritePtr
GlobalHandle
GetSystemTimeAsFileTime
LoadLibraryW
GetLastError
GetModuleHandleA
lstrlenA
EnterCriticalSection
CreateSemaphoreW
MultiByteToWideChar
GlobalUnlock
GlobalFree
WideCharToMultiByte
GetProcessHeap
IsBadReadPtr
lstrlenW
InitializeCriticalSection
WriteFile
InterlockedDecrement
DeleteCriticalSection
SetEvent
GetVersionExW
GetPrivateProfileStringW
ReadFile
SetEndOfFile
VirtualFree
oleaut32
VarBstrFromDisp
VarBstrFromUI2
VarBstrFromI8
VarBstrFromDate
VarBstrFromR4
VarBstrFromUI8
VarBstrFromI2
VarBstrFromDec
VarBstrFromI4
VarBstrFromUI1
VarBstrFromUI4
VarBstrFromCy
VarBstrFromI1
VarBstrFromR8
user32
CreateDialogParamW
ReleaseDC
SendMessageW
PeekMessageW
InvalidateRect
SetWindowLongW
DestroyWindow
GetAsyncKeyState
SetDlgItemInt
GetDesktopWindow
DefWindowProcW
GetWindowLongW
GetDC
CheckRadioButton
IsRectEmpty
DispatchMessageW
LoadStringW
GetDlgItemInt
MoveWindow
TranslateMessage
GetWindowRect
SetCursor
GetDlgItem
EnableWindow
ClientToScreen
GetClientRect
IsWindowVisible
CheckDlgButton
ShowWindow
IsWindow
SetDlgItemTextW
LoadCursorW
msoert2
AppendTempFileList
msls31
LsCompressSubline
LssbGetPlsrunsFromSubline
LssbGetDurTrailWithPensInSubline
LssbGetNumberDnodesInSubline
LssbGetObjDimSubline
LssbGetVisibleDcpInSubline
nddeapi
NDdeGetErrorStringA
NDdeGetTrustedShareW
NDdeIsValidAppTopicListW
NDdeIsValidAppTopicListA
NDdeGetShareSecurityA
NDdeGetShareSecurityW
NDdeGetTrustedShareA
cewmdm
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
DllGetClassObject
msoeacct
DllGetClassObject
ValidEmailAddress
DllCanUnloadNow
GetDllMajorVersion
HrCreateAccountManager
msltus40
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ