Static task
static1
Behavioral task
behavioral1
Sample
a46780e3b777c08b8c988dc288e8429ce46a19cc36e472719fdd7da58ee9626f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a46780e3b777c08b8c988dc288e8429ce46a19cc36e472719fdd7da58ee9626f.exe
Resource
win10v2004-20221111-en
General
-
Target
a46780e3b777c08b8c988dc288e8429ce46a19cc36e472719fdd7da58ee9626f
-
Size
73KB
-
MD5
337ccf0780e3277c1f896716ef7fbb59
-
SHA1
7b08cf61a6fec74cdf34ecb8a74f5dd3fcf6ea8e
-
SHA256
a46780e3b777c08b8c988dc288e8429ce46a19cc36e472719fdd7da58ee9626f
-
SHA512
e54cce733e288af4a0ad9dd159b882116732a31712b43d9f414dda6c13ba993c9cdd122c901897c2e923ad45046ff23eb3cf0ea80b7711f2127228d84f366a4c
-
SSDEEP
1536:2zg/Dc6VTmKURbOZDl78n9IQLfNXOI5pFnyL62PlvXGZD41GEUpPkMqfuhU:2kc6VTmXRbOZp82QLlXpFye29v6D41GO
Malware Config
Signatures
Files
-
a46780e3b777c08b8c988dc288e8429ce46a19cc36e472719fdd7da58ee9626f.exe windows x86
f76e6230615fd94ca94cb5b07f58c2d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
ExitProcess
HeapReAlloc
GetVolumeInformationA
HeapAlloc
CreateMutexA
CreateProcessA
InterlockedDecrement
MultiByteToWideChar
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetComputerNameA
SetFilePointer
ole32
OleCreate
CoTaskMemAlloc
CoInitialize
user32
SetWindowLongA
UpdateWindow
DestroyWindow
DefWindowProcA
TranslateMessage
CreateWindowExA
ShowWindow
GetWindowLongA
MessageBoxA
oleaut32
SysAllocString
SysFreeString
advapi32
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
Sections
.text Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ