Static task
static1
Behavioral task
behavioral1
Sample
de46151544b86666627159fd98ec6e87d3bd6a7a5a3fd40f6deef0a8490c8328.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
de46151544b86666627159fd98ec6e87d3bd6a7a5a3fd40f6deef0a8490c8328.exe
Resource
win10v2004-20221111-en
General
-
Target
de46151544b86666627159fd98ec6e87d3bd6a7a5a3fd40f6deef0a8490c8328
-
Size
164KB
-
MD5
6f6b0bbb2240b0b90a4d550848513374
-
SHA1
b8a8eca0e73cc2976dc51f6be6d3f93afe41be1b
-
SHA256
de46151544b86666627159fd98ec6e87d3bd6a7a5a3fd40f6deef0a8490c8328
-
SHA512
3d9f59e94799da2b2a0a6cbb1430a64ef63da82677b7b9c7ff20725264717ec5c575356e76c0e491c18517058a2e2520a06b629e1afa32cc91ad623052f204ad
-
SSDEEP
3072:bvkBjvHWwUuJ2vi40I3bug++k45y/i/u74ijFRb8aaeszs:+LHWVp0I38mypZR4aaVzs
Malware Config
Signatures
Files
-
de46151544b86666627159fd98ec6e87d3bd6a7a5a3fd40f6deef0a8490c8328.exe windows x86
e9ccf6024ac776e9358ef5aed50f5709
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sleep
CreateThread
GetModuleHandleA
GetStartupInfoA
msvcrt
_exit
_XcptFilter
exit
_acmdln
__getmainargs
strcpy
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memset
_initterm
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 636B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ultra Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ