Static task
static1
Behavioral task
behavioral1
Sample
46b83b6567c011055d5832307545abc5d40d03225d96deed922c9712c5b7e064.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
46b83b6567c011055d5832307545abc5d40d03225d96deed922c9712c5b7e064.exe
Resource
win10v2004-20220812-en
General
-
Target
46b83b6567c011055d5832307545abc5d40d03225d96deed922c9712c5b7e064
-
Size
815KB
-
MD5
55af9c753fe4f411ec234783508b1a50
-
SHA1
c5968420d162af1b2c036b96dc324f41b475f3b4
-
SHA256
46b83b6567c011055d5832307545abc5d40d03225d96deed922c9712c5b7e064
-
SHA512
f90a95af07851fcd1628f872434e9f3c0d115ce16d79b4aefb3c46e8bf5c1a7c6f192063cd6d36e69cab9c642da444f4a1ecac86cd92ac1f2b5749488a8efe64
-
SSDEEP
12288:10T9uXsBjvtKg4eQg5eH7iQiGkFK1aBQiULN2vKW48AWUwX/:1oYXHgkFJkFKcBIz8AWUwX
Malware Config
Signatures
Files
-
46b83b6567c011055d5832307545abc5d40d03225d96deed922c9712c5b7e064.exe windows x86
b8296b7927e31f29dbabfba990340029
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
GetModuleFileNameW
lstrcpynA
UnmapViewOfFile
lstrcpynA
GetCurrentProcess
lstrlenA
DeleteFileW
lstrcpynA
GetPrivateProfileIntA
SetCurrentDirectoryA
GetFullPathNameA
lstrcpynA
GetModuleHandleA
lstrcpynA
GetLocaleInfoW
GetStartupInfoW
TlsAlloc
FormatMessageA
GetNumberFormatA
TlsGetValue
VirtualAlloc
TlsAlloc
wavemsp
DllUnregisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.edata Size: 797KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ndata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ