Static task
static1
Behavioral task
behavioral1
Sample
846f8b74b2a890802f8b366070116de77978be0d7f747f8248632ffc9930dbef.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
846f8b74b2a890802f8b366070116de77978be0d7f747f8248632ffc9930dbef.exe
Resource
win10v2004-20221111-en
General
-
Target
846f8b74b2a890802f8b366070116de77978be0d7f747f8248632ffc9930dbef
-
Size
331KB
-
MD5
42bb1607306f3b77be2a73721a36438f
-
SHA1
3fa3e4d46f9b22f284ae33dbd336f7cc31d9bd52
-
SHA256
846f8b74b2a890802f8b366070116de77978be0d7f747f8248632ffc9930dbef
-
SHA512
78192e68b9a0d762893fe9bd124b263b1b3feffef99022bd76fd9190e295809eb0460ad928c485ebe985a128490f8077312520a265815ed878a7c30a3da9ffee
-
SSDEEP
6144:6azZqEdIopz0992MjCKYc+Z6jKff2yn5SOh+B6FBde:6aNHIo10T2yYtVf2ySx6F
Malware Config
Signatures
Files
-
846f8b74b2a890802f8b366070116de77978be0d7f747f8248632ffc9930dbef.exe windows x86
0e2d855bfdf399cedc5751d376c6742a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
CreateTimerQueue
GetLastError
GetModuleHandleA
IsBadWritePtr
GetProcAddress
HeapCreate
ResetEvent
user32
SendMessageA
GetTopWindow
InSendMessage
ole32
CoInitialize
netapi32
NetDfsManagerInitialize
psapi
GetModuleInformation
avifil32
AVISaveOptions
AVISaveOptionsFree
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 678B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 227KB - Virtual size: 683KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ