Static task
static1
Behavioral task
behavioral1
Sample
b046fdcc32f9bbf54a511eb80bf89f782a5e9ad36a13e11edd25e737384e720d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b046fdcc32f9bbf54a511eb80bf89f782a5e9ad36a13e11edd25e737384e720d.exe
Resource
win10v2004-20220812-en
General
-
Target
b046fdcc32f9bbf54a511eb80bf89f782a5e9ad36a13e11edd25e737384e720d
-
Size
654KB
-
MD5
01088c82dbcd15f1e86494ff57d1db57
-
SHA1
44a55709df72c0814cc1793b19e18da8e3e923f6
-
SHA256
b046fdcc32f9bbf54a511eb80bf89f782a5e9ad36a13e11edd25e737384e720d
-
SHA512
4051dd787572277e7b8104beb9451164d44118c8fb93c8cba06e389650b143e9e257b13476e5977eb3ad71bdca354f2ec5a36cd3e299e00f815cb0c373c233ed
-
SSDEEP
12288:vyHivgOtrBJv8BQ7ZGwucxbLr4+v/gnJLCBIl1p0Pz/RHBe84j74nG:aiPrBuG7wwdRLr4YohCBjlhej78G
Malware Config
Signatures
Files
-
b046fdcc32f9bbf54a511eb80bf89f782a5e9ad36a13e11edd25e737384e720d.exe windows x86
555f86bfefa202b6c87cc2a0fa46a928
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
cfgmgr32
CM_Add_IDA
CMP_UnregisterNotification
CM_Add_Range
CM_Add_Empty_Log_Conf
CMP_Report_LogOn
user32
GetCaretPos
wsprintfA
PeekMessageA
SetFocus
LoadImageA
PostMessageW
DispatchMessageA
IsZoomed
DrawIcon
DialogBoxParamA
SetCursorPos
IsCharLowerW
CharToOemA
kernel32
GetProcessHeap
FindFirstFileA
DeleteFileA
GetModuleHandleA
GetComputerNameW
OpenMutexA
GetLocalTime
GetLogicalDrives
GetCurrentDirectoryW
ResetEvent
GetAtomNameW
GetLastError
CreateEventW
GetProcAddress
lstrcpynA
FindResourceA
CreateNamedPipeW
SetCurrentDirectoryA
CreateSemaphoreA
GetConsoleAliasW
GetTickCount
GetVersionExA
GetFileType
lstrcmpA
CopyFileA
SetVolumeLabelA
CompareStringW
CloseHandle
GetSystemInfo
lstrcmpiA
QueryDosDeviceA
SetStdHandle
FileTimeToSystemTime
CreateMutexA
GetStringTypeA
FormatMessageW
GetLocaleInfoA
InterlockedDecrement
lstrcmpiA
VirtualQuery
GetShortPathNameA
GetFullPathNameA
GetCurrentProcess
Sections
.text Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 547KB - Virtual size: 546KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ