Static task
static1
Behavioral task
behavioral1
Sample
43eca0c1b6e74208f134d20ff283f983c030635433757dec8b9f15e0c4947c1a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
43eca0c1b6e74208f134d20ff283f983c030635433757dec8b9f15e0c4947c1a.exe
Resource
win10v2004-20221111-en
General
-
Target
43eca0c1b6e74208f134d20ff283f983c030635433757dec8b9f15e0c4947c1a
-
Size
148KB
-
MD5
48355fa3f4f63c208b84a94af3a84840
-
SHA1
8bd54d9f08fafda89a47e0890926ae0a3a1932db
-
SHA256
43eca0c1b6e74208f134d20ff283f983c030635433757dec8b9f15e0c4947c1a
-
SHA512
c2c5e5d0fd5a6a0713b05bccbc526da61e81f4274568fff5264eb876495507fa2527746ac74b7b8cd6fe7df2d3b3b8a4ac6478169636ee4a4aed9be4542d657f
-
SSDEEP
3072:hIZWWxukZThtCdVBJvXIATEi+S9ofjh4BwL1/BKbcltbAX24X:hIIWxu+hOVTXIAQDSifjh4Bwx/B9ltKX
Malware Config
Signatures
Files
-
43eca0c1b6e74208f134d20ff283f983c030635433757dec8b9f15e0c4947c1a.exe windows x86
fa12e45526172a2684b09eb32d7f72eb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadPriorityBoost
FileTimeToLocalFileTime
SearchPathW
SetFilePointer
DeleteTimerQueueEx
GetPrivateProfileSectionW
CreateDirectoryExA
SetThreadPriority
GlobalMemoryStatus
GetProcessHeap
CancelIo
_hwrite
GetNumberFormatA
CreateDirectoryW
Thread32First
GetShortPathNameW
SetProcessPriorityBoost
ResetWriteWatch
OpenFileMappingA
GetComputerNameA
RtlUnwind
SetEndOfFile
InitAtomTable
GetCurrencyFormatW
FindResourceA
SetProcessShutdownParameters
Process32NextW
GetSystemDefaultLangID
lstrcpynA
GetPrivateProfileStructA
GetThreadPriority
GetLastError
GetCommState
ReplaceFileA
GlobalLock
InterlockedIncrement
EnumTimeFormatsW
TransactNamedPipe
CompareStringA
user32
MessageBoxExA
GetMessageTime
EnableWindow
Sections
.text Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ