Static task
static1
Behavioral task
behavioral1
Sample
746567f53909a6b4d766e479b7815095a690555693d24d5ae9df5113fcfe518e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
746567f53909a6b4d766e479b7815095a690555693d24d5ae9df5113fcfe518e.exe
Resource
win10v2004-20220812-en
General
-
Target
746567f53909a6b4d766e479b7815095a690555693d24d5ae9df5113fcfe518e
-
Size
93KB
-
MD5
db3237b6e362ed0bacddeeb5dc5e1745
-
SHA1
e36a3be8ceb5be7901cfb91b865cd28dbe359123
-
SHA256
746567f53909a6b4d766e479b7815095a690555693d24d5ae9df5113fcfe518e
-
SHA512
8e7de0598ccef6ad355f59690ec08168440d69cad66883ed39b259729d5a444a857d5e52e619a0dfa1fb67aedf47c74a35a9403d63a2bba723beb65a2bb332b9
-
SSDEEP
1536:qOaiU2UJIoehpemF363UCsyC3bTxOQoW/kvESYakANv0vW/gtJLQW:qOaiU25RhplFIhSTxhoFESQSgtiW
Malware Config
Signatures
Files
-
746567f53909a6b4d766e479b7815095a690555693d24d5ae9df5113fcfe518e.exe windows x86
f899390217e44c7c9c79757732c6e7a7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnmapViewOfFile
LoadLibraryExA
GetProfileSectionA
CreateEventA
CreateMutexA
HeapDestroy
GetModuleHandleA
FindClose
CloseHandle
SetEvent
SetConsoleMode
GetLogicalDrives
VirtualProtect
ReleaseMutex
InterlockedExchange
GetTickCount
ExitProcess
IsValidCodePage
SetConsoleTitleA
GetConsoleWindow
GetLastError
advapi32
GetFileSecurityA
IsValidAcl
CopySid
RegSaveKeyA
RegQueryValueExA
IsTextUnicode
ReportEventA
GetAce
RegFlushKey
RegLoadKeyA
RegQueryInfoKeyA
RegCreateKeyExA
CredReadA
CloseEventLog
GetUserNameA
FreeSid
OpenTraceA
RegEnumKeyExA
EqualSid
LsaFreeMemory
RegEnumValueA
GetLengthSid
CredFree
OpenEventLogA
RegCloseKey
LsaClose
CloseServiceHandle
CloseTrace
IsValidSid
wininet
HttpQueryInfoA
DetectAutoProxyUrl
HttpSendRequestA
FindCloseUrlCache
DeleteUrlCacheEntryA
user32
MessageBoxA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ