Static task
static1
Behavioral task
behavioral1
Sample
45e9e2603fbadfddb37ca53e30b53171dced3d8be8d7359b7f1586113095ce1f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
45e9e2603fbadfddb37ca53e30b53171dced3d8be8d7359b7f1586113095ce1f.exe
Resource
win10v2004-20220901-en
General
-
Target
45e9e2603fbadfddb37ca53e30b53171dced3d8be8d7359b7f1586113095ce1f
-
Size
27KB
-
MD5
218196f89850ad1a9ac4e1523ccd3654
-
SHA1
2b9ad5c2b4369b4df63b8299fb6f232a24574963
-
SHA256
45e9e2603fbadfddb37ca53e30b53171dced3d8be8d7359b7f1586113095ce1f
-
SHA512
587d66362591d41e1cfb037f66e4c9ee61818a6bdf2aa9dda1040af9c2b24bd541f79b031297ce2f04222333af25db5d95b88988ec2f2126fd7d2191eec24275
-
SSDEEP
384:Am4I6I9Bcp0YEND3XKC5p9avOgYcQAYCZgXtTHh3QVvV49LPY7KF7G71BFmnrSzn:x4yQW38vOgYIZghpaVOcmF7aBoOzff
Malware Config
Signatures
Files
-
45e9e2603fbadfddb37ca53e30b53171dced3d8be8d7359b7f1586113095ce1f.exe windows x86
31d288880bf91724434417cff7bc76a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
_wcsnicmp
wcsncmp
wcsncpy
_wcsdup
free
wcscmp
memmove
memcpy
wcslen
kernel32
GetModuleHandleW
HeapCreate
HeapDestroy
ExitProcess
GetTickCount
Sleep
SuspendThread
TerminateProcess
CloseHandle
InitializeCriticalSection
GetModuleFileNameW
HeapFree
HeapAlloc
HeapSize
FreeLibrary
LoadLibraryW
WideCharToMultiByte
GetProcAddress
WriteFile
CreateFileW
GetFileSize
ReadFile
HeapReAlloc
ntdll
NtUnmapViewOfSection
Sections
.code Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 38B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.o40h Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ