Static task
static1
Behavioral task
behavioral1
Sample
45f33b8774b796142853a333a7b0dd4ba11164088b6083aa29503dcfce8784d8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
45f33b8774b796142853a333a7b0dd4ba11164088b6083aa29503dcfce8784d8.exe
Resource
win10v2004-20220812-en
General
-
Target
45f33b8774b796142853a333a7b0dd4ba11164088b6083aa29503dcfce8784d8
-
Size
4.2MB
-
MD5
92e77ecc8b3446cc5ceaa34570f8e22d
-
SHA1
744a9134fa9193e3f147cb5bc3443127264a610e
-
SHA256
45f33b8774b796142853a333a7b0dd4ba11164088b6083aa29503dcfce8784d8
-
SHA512
f0246a1e9f0c83af91ac7daa67cbdb439c861d7a5c20dbe4f0627f3099d689f33a789090b96b16a325850f9c7a5368203ed25f683723746886b7ff22c1be61b4
-
SSDEEP
49152:Ef9Psd6+ukjWM9VkhUKjElJKvdvad4mF6rgTUKz4IGy7Z3IXALUBz2Zkh5qd6zjR:Ef86+vjWOVkhjEPpLoWwz
Malware Config
Signatures
Files
-
45f33b8774b796142853a333a7b0dd4ba11164088b6083aa29503dcfce8784d8.exe windows x86
9715b2c11e2800295f25ff7e58d9d60e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapAlloc
IsBadReadPtr
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
GetCurrentProcessId
CreateFileA
FileTimeToSystemTime
SystemTimeToFileTime
LeaveCriticalSection
GetCurrentThread
WaitForSingleObject
GetFileAttributesA
HeapFree
CreateMutexA
GetModuleHandleExW
Sleep
GetTickCount
InterlockedCompareExchange
ExitProcess
GetVersionExA
GetModuleHandleA
VirtualAlloc
VirtualFree
CloseHandle
GetTempPathA
SetLastError
GetProcAddress
LoadLibraryA
RemoveDirectoryA
DeleteCriticalSection
GetLastError
GetLocalTime
IsBadWritePtr
GetProcessHeap
DisableThreadLibraryCalls
WriteConsoleW
CreateFileW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
HeapReAlloc
LoadLibraryExW
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
SetEndOfFile
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
GetStringTypeW
GetStartupInfoW
GetFileType
IsProcessorFeaturePresent
ReadFile
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
advapi32
RegEnumKeyExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegCreateKeyW
RegOpenKeyA
RegCreateKeyA
user32
PeekMessageW
GetDlgItem
MsgWaitForMultipleObjects
GetMessageA
PostQuitMessage
GetMessageW
DispatchMessageW
DefWindowProcA
CreatePopupMenu
GetSystemMetrics
GetClientRect
PostMessageA
DestroyWindow
SendMessageW
FindWindowW
SetForegroundWindow
TrackPopupMenu
CreateWindowExW
RegisterClassExA
UpdateWindow
DispatchMessageA
RegisterWindowMessageW
CheckMenuItem
SendMessageA
RegisterClassExW
DefWindowProcW
LoadIconA
RegisterWindowMessageA
FindWindowA
RedrawWindow
MessageBoxA
PostMessageW
SetWindowPos
LoadIconW
GetDesktopWindow
GetLastInputInfo
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ