Static task
static1
Behavioral task
behavioral1
Sample
745537459ceddae180d1bf6f58600ab2c77be23ab246ca58ae3829d5f1b0705f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
745537459ceddae180d1bf6f58600ab2c77be23ab246ca58ae3829d5f1b0705f.exe
Resource
win10v2004-20220812-en
General
-
Target
745537459ceddae180d1bf6f58600ab2c77be23ab246ca58ae3829d5f1b0705f
-
Size
115KB
-
MD5
6ae1f080ac8a0b5d2d7862c51e7f8e8d
-
SHA1
6e992764eaad1ec70fc3b0103ee23acb6fb2bd48
-
SHA256
745537459ceddae180d1bf6f58600ab2c77be23ab246ca58ae3829d5f1b0705f
-
SHA512
2e60de82f3d26b028e1851f11f16488f0e074950ad7f1d0b7533e21abfb5e92b557d1f32da5c0396937b3fcb5943f08bbdcbdb1e3eb64a56f23e876cc60e14d0
-
SSDEEP
3072:dpe0cMk9szNMuzGaHUmAxvI9kso/ong7nZ4GwPJltZrpRB:+MtCwGajARI9Toig7nZ4Gwbthp
Malware Config
Signatures
Files
-
745537459ceddae180d1bf6f58600ab2c77be23ab246ca58ae3829d5f1b0705f.exe windows x86
4bff0569b24d5c99f6772c992d423f9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
WriteFile
TlsAlloc
QueryPerformanceCounter
GetProcAddress
GetCurrentThreadId
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
HeapSize
RtlUnwind
HeapReAlloc
VirtualAlloc
GetTickCount
GetVersion
GetSystemTimeAsFileTime
HeapAlloc
IsValidCodePage
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
user32
UpdateWindow
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassExA
LoadStringA
FindWindowA
DefWindowProcA
BeginPaint
GetClientRect
DrawTextA
EndPaint
wsprintfA
LoadIconW
CreateWindowExA
ShowWindow
gdi32
CreateBitmap
Rectangle
TextOutA
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.BSS Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ