Static task
static1
Behavioral task
behavioral1
Sample
b45a7fbe273e41962771a1770d7afd4ff11a389f61653c0feb20df0545e93dce.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b45a7fbe273e41962771a1770d7afd4ff11a389f61653c0feb20df0545e93dce.exe
Resource
win10v2004-20220812-en
General
-
Target
b45a7fbe273e41962771a1770d7afd4ff11a389f61653c0feb20df0545e93dce
-
Size
78KB
-
MD5
126505ecf1ce4b3f86fb75eb7ce1d346
-
SHA1
869085ba358cada0f0670bd3066bc31853bce593
-
SHA256
b45a7fbe273e41962771a1770d7afd4ff11a389f61653c0feb20df0545e93dce
-
SHA512
44e8247d9dbc56f606d7fc0ba69e908a93afa6869a2f04be59bc2d3504f6740f2b874967dbbc642428f44a3c90bf46a6e15bcb23963f90c987aae97c36962040
-
SSDEEP
768:9YYYGPlZsiA6r+YR6GZ202YkxD8ZuzQpQILVO5/CO:jPlihG3RkR8ZuUBI5/n
Malware Config
Signatures
Files
-
b45a7fbe273e41962771a1770d7afd4ff11a389f61653c0feb20df0545e93dce.exe windows x86
b639f640d47d3af02637eb9f07ea060f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
HeapFree
LCMapStringA
LCMapStringW
MultiByteToWideChar
RtlUnwind
SetHandleCount
SetLastError
SetUnhandledExceptionFilter
TlsAlloc
HeapCreate
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteFile
VirtualAllocEx
GetVersionExA
GetSystemInfo
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetFileType
GetEnvironmentStringsW
GetEnvironmentStrings
GetCurrentThreadId
GetCurrentProcess
GetCommandLineA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
ExitProcess
TlsFree
DeleteCriticalSection
user32
PostQuitMessage
DefWindowProcA
gdi32
BeginPath
MoveToEx
LineTo
EndPath
StrokePath
GetStockObject
SetBkColor
SelectObject
SetViewportExtEx
GetObjectW
ExtTextOutW
DeleteObject
CreateSolidBrush
CreateFontIndirectW
CreateCompatibleDC
BitBlt
GetTextExtentPointW
SetMapMode
SetWindowExtEx
advapi32
RegOpenKeyExA
ole32
CoInitializeEx
CoUninitialize
CoCreateInstance
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 612B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ