Static task
static1
Behavioral task
behavioral1
Sample
c48396a3fb261f928a713416738d14a5a5ae6dcec41969c92b88dbf497b2aa8d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c48396a3fb261f928a713416738d14a5a5ae6dcec41969c92b88dbf497b2aa8d.exe
Resource
win10v2004-20220812-en
General
-
Target
c48396a3fb261f928a713416738d14a5a5ae6dcec41969c92b88dbf497b2aa8d
-
Size
451KB
-
MD5
41328aa9782f7d8b01533227210c5a81
-
SHA1
74aab6ce4070452caa859d0babdc9117f72454b6
-
SHA256
c48396a3fb261f928a713416738d14a5a5ae6dcec41969c92b88dbf497b2aa8d
-
SHA512
cc3b32825fb7e6bdec63190bb377395f83857d6fa56995b25248b30ddfb3d0cce1456db612092b0f56e460aaf0985dc000b7c822b1f51a0a8fb299ed3a7fced1
-
SSDEEP
12288:qGw2g/gZvGot4xz6dK40K7n783GANMpvybq:I2gIdtWwK4n82uua
Malware Config
Signatures
Files
-
c48396a3fb261f928a713416738d14a5a5ae6dcec41969c92b88dbf497b2aa8d.exe windows x86
0f28ff6a778f1736fc401ef5a2278dfa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
DisableThreadLibraryCalls
Sleep
GlobalLock
GlobalUnlock
LoadLibraryA
GetProcAddress
FreeLibrary
SleepEx
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
user32
EnableWindow
RegisterClipboardFormatW
MessageBoxW
GetParent
SendDlgItemMessageW
GetWindowLongW
SetWindowLongW
GetDlgItem
SendMessageW
wsprintfW
WinHelpW
LoadStringW
DialogBoxParamW
EndDialog
ole32
ReleaseStgMedium
msvcrt
_except_handler3
shlwapi
StrCatW
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0x9a9 Size: 410KB - Virtual size: 409KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kalqo Size: 512B - Virtual size: 206B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00lqo Size: 512B - Virtual size: 234B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.10111 Size: 512B - Virtual size: 150B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.88111 Size: 512B - Virtual size: 122B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ