Static task
static1
Behavioral task
behavioral1
Sample
48d826d2afab96b3361d798fe8a4274d11a25f124525895896ebee7c393420d0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
48d826d2afab96b3361d798fe8a4274d11a25f124525895896ebee7c393420d0.exe
Resource
win10v2004-20220901-en
General
-
Target
48d826d2afab96b3361d798fe8a4274d11a25f124525895896ebee7c393420d0
-
Size
716KB
-
MD5
5629326ee946d41c6c0cb6e45159ec54
-
SHA1
b943289323ae378eb92ba04f9cd262171cf8e113
-
SHA256
48d826d2afab96b3361d798fe8a4274d11a25f124525895896ebee7c393420d0
-
SHA512
566a753625a138def024d2af7e7ad3a1e89e55cdf9540c9c4582f14c2718c614aeabb86743175ea860749ac9c5ae8c98b178b364c0e11035278c7ae386f63ae4
-
SSDEEP
12288:86X/fALhX5iFiyMANBhXvm1QkY1zHYVPnxeOeOeOeOeOeOeOerTLGXeOe:BXuvShBm1QNHYBxeOeOeOeOeOeOeOerd
Malware Config
Signatures
Files
-
48d826d2afab96b3361d798fe8a4274d11a25f124525895896ebee7c393420d0.exe windows x86
17da5184a199deaddb6b3a506f645b3f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
UpdateWindow
DefWindowProcA
KillTimer
PostQuitMessage
kernel32
GetFileType
LCMapStringW
LCMapStringA
GetProcessHeap
WriteConsoleW
GetVersion
GetCommandLineA
FreeEnvironmentStringsW
SetLastError
ExitProcess
InterlockedDecrement
WriteFile
HeapCreate
GetStringTypeA
GetCPInfo
GetConsoleOutputCP
GetStdHandle
TerminateProcess
VirtualAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetProcAddress
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
VirtualFree
HeapFree
RtlUnwind
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetACP
GetOEMCP
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
GetStringTypeW
Sections
.text Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 636KB - Virtual size: 637KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE