Static task
static1
Behavioral task
behavioral1
Sample
246b7ddc38a8cc8e386e95948621532279a0f5b85bb6561f6e26576e1ba5ca30.exe
Resource
win7-20221111-en
General
-
Target
246b7ddc38a8cc8e386e95948621532279a0f5b85bb6561f6e26576e1ba5ca30
-
Size
2.6MB
-
MD5
072b144a0ab9e35aaad181039b396447
-
SHA1
7f840c901d221179a3965d0b6ed8d79e6892832b
-
SHA256
246b7ddc38a8cc8e386e95948621532279a0f5b85bb6561f6e26576e1ba5ca30
-
SHA512
a918575215cb3e27e7d57694419e0c1f4420715d600cac77c812e479b0396ac5035307e62eb1c4ea976d8670ca72e3c008e5cc4f35f07bc34f34c38cc2ebae57
-
SSDEEP
49152:l7/tmn7wgXYSNkjuykGcbRYBCegwzT0hattFe1M7C9WPRsc2:1KHkRkHbcaMosFe1tY
Malware Config
Signatures
Files
-
246b7ddc38a8cc8e386e95948621532279a0f5b85bb6561f6e26576e1ba5ca30.exe windows x86
7e8644ca25af6753e821b0e7323e41fb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetFileAttributesA
CreateFileA
LocalFileTimeToFileTime
WideCharToMultiByte
MultiByteToWideChar
ResumeThread
WaitForSingleObjectEx
AddVectoredExceptionHandler
HeapAlloc
CreateMutexA
LeaveCriticalSection
ReadFile
GetTempPathA
GetCurrentProcessId
DisableThreadLibraryCalls
GetModuleHandleExW
Sleep
GetLastError
GetTickCount
InterlockedCompareExchange
ExitProcess
SetLastError
GetModuleHandleA
GetVersionExA
VirtualAlloc
VirtualFree
LoadLibraryA
GetProcAddress
RemoveDirectoryA
GetCurrentThread
WaitForSingleObject
FileTimeToLocalFileTime
GetCurrentProcess
GetLocalTime
HeapFree
GetProcessId
GetProcessHeap
WriteConsoleW
CreateFileW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
HeapReAlloc
LoadLibraryExW
GetModuleHandleW
TlsFree
TlsSetValue
SetEndOfFile
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
GetStringTypeW
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
DeleteCriticalSection
GetStartupInfoW
advapi32
RegCreateKeyExA
RegQueryValueExW
RegQueryValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
RegOpenKeyA
RegEnumValueW
RegEnumKeyA
user32
LoadIconW
DispatchMessageW
MsgWaitForMultipleObjects
DispatchMessageA
GetWindowTextA
PeekMessageW
GetWindowRect
SendMessageA
CreateWindowExA
PostQuitMessage
FindWindowW
RegisterClassExW
EnumWindows
LoadIconA
GetMessageW
TrackPopupMenu
FindWindowA
DestroyWindow
RegisterClassExA
SetForegroundWindow
UpdateWindow
GetCursorPos
SetWindowPos
SendMessageW
GetWindowTextW
GetMessageA
RedrawWindow
BringWindowToTop
CreatePopupMenu
DefWindowProcA
TranslateMessage
RegisterWindowMessageW
PeekMessageA
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ