Static task
static1
Behavioral task
behavioral1
Sample
48a82c72cca7c12c9e064380ec16f383fdde4d4cc5b5825278260840c358cbdf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
48a82c72cca7c12c9e064380ec16f383fdde4d4cc5b5825278260840c358cbdf.exe
Resource
win10v2004-20221111-en
General
-
Target
48a82c72cca7c12c9e064380ec16f383fdde4d4cc5b5825278260840c358cbdf
-
Size
133KB
-
MD5
34bc047ac68b6070c97c50746b79b213
-
SHA1
ea4918c36a1745461b39890b7e58b8479e7a6002
-
SHA256
48a82c72cca7c12c9e064380ec16f383fdde4d4cc5b5825278260840c358cbdf
-
SHA512
f4a2012c3b05b00ef2608ce16124cc1ecd79777d3810f356dac9aba577b46f5c4ae60a5ca9d7af1e563555aa31d12bbf58594a474fa647c5809beebd3185a885
-
SSDEEP
3072:B4T2VrtyOEp2y70jV5XzkI7BzkcSvgHPzLPh:K2VopX8dzkcBxagHPzLp
Malware Config
Signatures
Files
-
48a82c72cca7c12c9e064380ec16f383fdde4d4cc5b5825278260840c358cbdf.exe windows x86
2bc40f23ea7637f349226cf17cdeb6fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ws2_32
recv
user32
GetMessageA
dnsapi
DnsFlushResolverCache
shlwapi
PathFileExistsA
shell32
SHGetSpecialFolderPathA
mpr
WNetGetUserA
wininet
HttpSendRequestA
msvcrt
strrchr
advapi32
RegSetValueExA
ole32
CoCreateInstance
oleaut32
VariantClear
Sections
.text Size: 125KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE