Static task
static1
Behavioral task
behavioral1
Sample
46ee488ac1d0eaf47623e20d0626fbe92e553c2bf9734518008b7118097915bb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
46ee488ac1d0eaf47623e20d0626fbe92e553c2bf9734518008b7118097915bb.exe
Resource
win10v2004-20221111-en
General
-
Target
46ee488ac1d0eaf47623e20d0626fbe92e553c2bf9734518008b7118097915bb
-
Size
64KB
-
MD5
cb712da87321c64ddf4e730ed8d4bace
-
SHA1
7c6389ed730de1ccca8978df50ba00c9ddda1794
-
SHA256
46ee488ac1d0eaf47623e20d0626fbe92e553c2bf9734518008b7118097915bb
-
SHA512
b03ef01a177da946335d6645b26b96989f23d51501a4631f5e4f3464e605e1661a48982645d2290705a59c2b6c5e94e55aac176646d9ad08b4c8c24d5c8e0290
-
SSDEEP
768:tLnUkaNo+/bpAyZhsGStX/foyvKLnnzINQ/rxgpB+LUnTAMSrowjBGkD92TwXk:tPpyZPSxYuKINexuJwrxBG62TAk
Malware Config
Signatures
Files
-
46ee488ac1d0eaf47623e20d0626fbe92e553c2bf9734518008b7118097915bb.exe windows x86
fd37992ee73fbffe6413917b166b7f5e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetFullPathNameW
OpenMutexW
WaitForMultipleObjects
Sleep
FindNextVolumeA
HeapCreate
ReleaseSemaphore
ReadConsoleA
GetDiskFreeSpaceW
GetEnvironmentVariableW
GetConsoleMode
GetVolumePathNameW
GetCurrentDirectoryA
GetStringTypeA
CloseHandle
CreateSemaphoreA
GetFullPathNameW
CloseHandle
VirtualFree
CloseHandle
GetModuleHandleW
FindFirstVolumeA
dbghelp
FindFileInPath
ImageRvaToSection
ImageRvaToVa
ImageNtHeader
Sections
.text Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.res Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE