Static task
static1
Behavioral task
behavioral1
Sample
46045d59fd1105aca3e2c870fbc37da9a7909d22f696494e27863a777bfa95a1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
46045d59fd1105aca3e2c870fbc37da9a7909d22f696494e27863a777bfa95a1.exe
Resource
win10v2004-20220812-en
General
-
Target
46045d59fd1105aca3e2c870fbc37da9a7909d22f696494e27863a777bfa95a1
-
Size
322KB
-
MD5
7e2abe25b321296dd904eea79f3594c1
-
SHA1
61fa58999c99fbb6cd40e3844ec6f7b88b94d895
-
SHA256
46045d59fd1105aca3e2c870fbc37da9a7909d22f696494e27863a777bfa95a1
-
SHA512
f18a16436429cd9cb7fc5504d134f0b3f0c00963ee56332e6b02d36ae71555bb1ebc56e7179df39f8e6c137daf40e231e1286c38ae3e6bb1b069c13ef8508a66
-
SSDEEP
6144:aKu9/Kr8fZ2ntsdHqfxO7osCT2w7ZVC5m3BC564ubYe5t:aKsfAnD5OFCqwGm3k8jk
Malware Config
Signatures
Files
-
46045d59fd1105aca3e2c870fbc37da9a7909d22f696494e27863a777bfa95a1.exe windows x86
6a24255312962d277c91db8fde63f4ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
shlwapi
SHDeleteKeyW
kernel32
lstrlenW
GetVersionExW
GetCurrentProcess
GetModuleHandleW
GetModuleFileNameW
CreateProcessW
GetLastError
CreateFileW
CopyFileW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
ExitThread
ExitProcess
lstrcpyW
lstrcmpW
UnmapViewOfFile
MultiByteToWideChar
GetSystemTime
CreateEventW
MapViewOfFile
SetFileTime
GetFileTime
GetWindowsDirectoryW
GetFileSize
CreateDirectoryW
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
SetEndOfFile
SetFilePointer
GetShortPathNameW
MoveFileExW
DeleteFileW
WriteFile
LocalFree
FormatMessageW
SetCurrentDirectoryW
LocalAlloc
GetExitCodeThread
CreateThread
OpenProcess
HeapAlloc
GetProcessHeap
HeapFree
TerminateProcess
GetDiskFreeSpaceW
ResumeThread
SuspendThread
WideCharToMultiByte
Sleep
GetSystemDirectoryW
CreateMutexW
OpenMutexW
WaitForSingleObject
ReleaseMutex
CloseHandle
lstrcmpiW
LoadLibraryW
GetProcAddress
FreeLibrary
GetFileAttributesW
lstrcatW
CreateFileMappingW
GetStartupInfoW
user32
GetClientRect
MessageBoxW
wsprintfW
GetForegroundWindow
SendMessageW
SetDlgItemTextW
SendDlgItemMessageW
wsprintfA
EnableWindow
GetDlgItem
DispatchMessageW
TranslateMessage
PeekMessageW
MsgWaitForMultipleObjects
PostQuitMessage
ExitWindowsEx
GetWindowRect
ScreenToClient
CreateWindowExW
CallWindowProcW
GetDlgItemTextW
GetFocus
GetParent
GetDlgCtrlID
DestroyWindow
DialogBoxParamW
SetFocus
CharUpperW
FindWindowW
PostMessageW
EnumWindows
GetWindowThreadProcessId
GetWindowTextW
IsDialogMessageW
SetWindowPos
GetWindowLongW
SetWindowLongW
SetWindowTextW
CreateDialogParamW
LoadIconW
ShowWindow
GetMessageW
advapi32
RegQueryValueExW
AdjustTokenPrivileges
OpenProcessToken
RegOpenKeyExW
RegEnumKeyW
RegQueryInfoKeyW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
GetUserNameW
FreeSid
LookupPrivilegeValueW
shell32
ShellExecuteW
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteExW
ole32
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
LoadTypeLibEx
msvcrt
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
_itow
strstr
strchr
memmove
wcschr
wcsncpy
_ftime
_ftol
memcpy
_stricmp
strncpy
_wcsupr
wcscmp
_wsplitpath
strlen
wcsncmp
free
malloc
memcmp
??2@YAPAXI@Z
??3@YAXPAX@Z
wcsstr
memset
wcsrchr
wcslen
wcscat
wcscpy
__CxxFrameHandler
_controlfp
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 22KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE