Static task
static1
Behavioral task
behavioral1
Sample
45ccfacce7363b633e12d0d39ecfa94753d421e92436a483635d0c907227c8d6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
45ccfacce7363b633e12d0d39ecfa94753d421e92436a483635d0c907227c8d6.exe
Resource
win10v2004-20221111-en
General
-
Target
45ccfacce7363b633e12d0d39ecfa94753d421e92436a483635d0c907227c8d6
-
Size
153KB
-
MD5
062bdab56c20fa9cd20bd7962bff79a2
-
SHA1
c89c0702e690a30338d4ea38d4e34ee56d9f52aa
-
SHA256
45ccfacce7363b633e12d0d39ecfa94753d421e92436a483635d0c907227c8d6
-
SHA512
68d4ce267cbac16aa22337482c083e56b181fbb406d0f7b71e369ec96accb27376f38e43f798103f75e49097fb96d7d5dd119e9d6e888210ff03d8fea23d1fab
-
SSDEEP
3072:VcCY+vthVRtkB/m5/Hm0BM6AYeZB8uhqDbMBbivmlt/W:VceVhlnm0hAYmhq/Mxivml9W
Malware Config
Signatures
Files
-
45ccfacce7363b633e12d0d39ecfa94753d421e92436a483635d0c907227c8d6.exe windows x86
2e7adb62c9fc0ceca2c05e4ec12695c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerInstallFileA
VerFindFileA
kernel32
GetProcAddress
lstrcmpiA
FreeResource
GetOEMCP
LoadLibraryExA
CreateEventA
VirtualAlloc
WideCharToMultiByte
LockResource
FreeLibrary
GetCurrentProcess
FindFirstFileA
ExitProcess
GlobalAlloc
GetLastError
LoadResource
msvcrt
malloc
memmove
memcpy
wcstol
atol
wcscspn
wcschr
exit
wcsncmp
clock
memset
mbstowcs
ole32
StgCreateDocfileOnILockBytes
MkParseDisplayName
CoDisconnectObject
WriteClassStm
CLSIDFromProgID
CoCreateGuid
PropVariantClear
StgOpenStorage
CoTaskMemFree
CoRevokeClassObject
gdi32
CopyEnhMetaFileA
Sections
BSS Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 2KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ