Static task
static1
Behavioral task
behavioral1
Sample
45e437d5ec8d509174d45530afea0674483b0005ef5eb31d32163cad1adbed1c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
45e437d5ec8d509174d45530afea0674483b0005ef5eb31d32163cad1adbed1c.exe
Resource
win10v2004-20220901-en
General
-
Target
45e437d5ec8d509174d45530afea0674483b0005ef5eb31d32163cad1adbed1c
-
Size
153KB
-
MD5
6ddfb04a33c617af87797b804f2c593a
-
SHA1
a4551d094ff27ad82199ce55acd5a44d58692ed8
-
SHA256
45e437d5ec8d509174d45530afea0674483b0005ef5eb31d32163cad1adbed1c
-
SHA512
49c3ec3ef561c2e8c8fc33e1237628f0c3866034947cf280133c043668b6bec1945d5a7bd0d8e5ee09c489610ea55ff1647ea236b6f0214b31cbb8aaad4722af
-
SSDEEP
3072:Tuw3iAsx4rgPdJ0hkBrbEPkrGkFknzvxx+SkJ1UEl:P3iA651bBrbEPk6kFaTxx7K1Us
Malware Config
Signatures
Files
-
45e437d5ec8d509174d45530afea0674483b0005ef5eb31d32163cad1adbed1c.exe windows x86
921f876d0c27a322465f4fcdd5e5fecb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
gdi32
MoveToEx
kernel32
CloseHandle
CreateFileA
ExitProcess
GetCommandLineA
GetCurrentProcess
GetExitCodeProcess
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetVersionExA
GlobalAlloc
GlobalFree
GlobalReAlloc
LoadLibraryA
MultiByteToWideChar
ReadFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile
GetComputerNameA
GetLogicalDrives
VirtualAlloc
RtlMoveMemory
ole32
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
ProgIDFromCLSID
oleaut32
GetActiveObject
SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy
user32
CreateDialogIndirectParamA
CreateDialogParamA
CreateWindowExA
DialogBoxIndirectParamA
MessageBoxA
DialogBoxParamA
GetWindow
Sections
.text Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.link Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ