Static task
static1
Behavioral task
behavioral1
Sample
48eac368c9514be13b9cd9a534c2911019a6d1d7742480daff739284701067d0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
48eac368c9514be13b9cd9a534c2911019a6d1d7742480daff739284701067d0.exe
Resource
win10v2004-20221111-en
General
-
Target
48eac368c9514be13b9cd9a534c2911019a6d1d7742480daff739284701067d0
-
Size
27KB
-
MD5
8c5c422a77e09e17f3a43a9e6fdf83e0
-
SHA1
e50a5d0513f587d9474cc4489934c0f6688cbc5a
-
SHA256
48eac368c9514be13b9cd9a534c2911019a6d1d7742480daff739284701067d0
-
SHA512
09809e7ed7ec46d70ea02efd75793659f6c4521fb92964efa1f118ab3767b3aa77a0affbbbe8f48f25d07c338b88ed406b8ef8dd94bc4be2109c6b4b4aff1bc6
-
SSDEEP
384:pBeUhLt8nbDqnizGQcWX/kQCNo1IlGbUnSWMiEyS:lIvqni6Q7kvoalhob
Malware Config
Signatures
Files
-
48eac368c9514be13b9cd9a534c2911019a6d1d7742480daff739284701067d0.exe windows x86
396ff872e4bd05491c1597e837e0152f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
GetMessageA
LoadStringA
RegisterClassExA
LoadCursorA
LoadIconA
CreateWindowExA
DefWindowProcA
DestroyWindow
DialogBoxParamA
PostQuitMessage
SendMessageA
DispatchMessageA
kernel32
InitializeCriticalSection
GetModuleHandleA
GetFileSize
CloseHandle
GetCurrentProcess
GetStartupInfoA
GetLocalTime
WriteFile
GetFileAttributesExA
GetTempPathA
GetTempFileNameA
HeapAlloc
GetProcessHeap
SleepEx
LoadLibraryA
CreateFileA
comctl32
InitCommonControlsEx
msvcrt
exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p__acmdln
_exit
_XcptFilter
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ