Static task
static1
Behavioral task
behavioral1
Sample
c46d00e9463b3246a2d6ae59af6ca38abbbfe05520ae9cf299256af54442421c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c46d00e9463b3246a2d6ae59af6ca38abbbfe05520ae9cf299256af54442421c.exe
Resource
win10v2004-20220812-en
General
-
Target
c46d00e9463b3246a2d6ae59af6ca38abbbfe05520ae9cf299256af54442421c
-
Size
112KB
-
MD5
3a8efff7244110735538130d92a0516a
-
SHA1
3a4457e0c0817f01a803b0a3bf553bb663e23bf9
-
SHA256
c46d00e9463b3246a2d6ae59af6ca38abbbfe05520ae9cf299256af54442421c
-
SHA512
103364b2b08fc1b5cc5dc454efaf62bc35e87a9faf09268468094a3a4a062facbd76ffde5c1069f1b8748924fb3fcdbb2c05b523126b68ddd5669b47cd503d9c
-
SSDEEP
3072:sQROO2DvPJ0RKK1Q044EdmU+HeKk3ai+N2:3ROXDnJ0RKK97EdmUhZ30o
Malware Config
Signatures
Files
-
c46d00e9463b3246a2d6ae59af6ca38abbbfe05520ae9cf299256af54442421c.exe windows x86
3804a7c7d7364c0b66c9740b5ac1ec02
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
SetEvent
GetCurrentProcess
GetCurrentThreadId
GetModuleHandleW
CreateEventW
CreateThread
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
Sleep
WaitForSingleObject
CloseHandle
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
lstrlenW
DeleteCriticalSection
UnhandledExceptionFilter
InitializeCriticalSection
user32
CharUpperW
TranslateMessage
DispatchMessageW
GetMessageW
UnregisterClassA
CharNextW
PostThreadMessageW
advapi32
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
ole32
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
SysStringLen
LoadRegTypeLi
LoadTypeLi
SysFreeString
atl80
ord31
ord30
ord32
ord17
ord61
ord23
ord64
ord20
ord18
ord58
ord22
msvcr80
_controlfp_s
??3@YAXPAX@Z
??_V@YAXPAX@Z
free
??_U@YAPAXI@Z
__CxxFrameHandler3
??2@YAPAXI@Z
memset
_except_handler4_common
?terminate@@YAXXZ
_unlock
_encode_pointer
__dllonexit
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson
rpcrt4
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrCStdStubBuffer_Release
NdrCStdStubBuffer2_Release
IUnknown_Release_Proxy
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
NdrOleAllocate
NdrOleFree
NdrStubForwardingFunction
CStdStubBuffer_DebugServerRelease
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 1024B - Virtual size: 539B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE