Static task
static1
Behavioral task
behavioral1
Sample
246f2e63a8a51b46726b1f50c8c479acbb683d3393d058174b432c366fa29ec8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
246f2e63a8a51b46726b1f50c8c479acbb683d3393d058174b432c366fa29ec8.exe
Resource
win10v2004-20220901-en
General
-
Target
246f2e63a8a51b46726b1f50c8c479acbb683d3393d058174b432c366fa29ec8
-
Size
150KB
-
MD5
80db31b517b6c2eb3a2277164f68db1b
-
SHA1
d21d06cb49c0e318097e55de7e98f3ba14506ae9
-
SHA256
246f2e63a8a51b46726b1f50c8c479acbb683d3393d058174b432c366fa29ec8
-
SHA512
49fc2e54453b9bcd4a2a4f1c48b36543e40ce442701a62aadb901e7637f8620c2ef505959b5402c046bd7714d39fc59dc1058bb23cfcc9de027072787ab6b53a
-
SSDEEP
3072:eKdbw1OkwfhixURJW/LRKRxVhzXm6tEJKl7Eqm7PTfwGarimYuojTqP:eob+xyRJW/LRIxVhzWgbNEqyerBo/qP
Malware Config
Signatures
Files
-
246f2e63a8a51b46726b1f50c8c479acbb683d3393d058174b432c366fa29ec8.exe windows x86
6cccde3aa82223a3b1c685295c4083ab
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
GetLocaleInfoW
GetModuleHandleA
msvcrt
wcsftime
_ltoa
_mbsninc
_acmdln
fgetws
calloc
_adj_fdivr_m64
_controlfp
_outpd
_exit
wcscmp
_except_handler3
_cputws
_cwait
fwprintf
_chsize
__p__fmode
_ismbbkprint
_initterm
_aligned_realloc
_dstbias
strstr
_snwprintf
__p__commode
wcslen
_adjust_fdiv
_safe_fprem1
_cwprintf
wcstok
_strset
_wspawnlp
_wsplitpath
_snwscanf
_seh_longjmp_unwind
_lrotl
ferror
_fpreset
cosh
_wfopen
_expand
ftell
labs
_setjmp3
wcsstr
_set_error_mode
wcstol
_spawnle
__setusermatherr
wcsncpy
getenv
strtok
_wchdir
vprintf
_wfreopen
setbuf
rewind
__getmainargs
_heapmin
fwscanf
_XcptFilter
memcpy
strcat
_wpopen
iswcntrl
_spawnve
_putws
sin
_endthreadex
_getsystime
exit
isspace
_flsbuf
__set_app_type
strcmp
_mbclen
_wfdopen
Sections
.text Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ