Static task
static1
Behavioral task
behavioral1
Sample
cd746b20e4a1a4999e19dd5660e3c557a2c6afb8b52f504a4365709fe09b3784.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cd746b20e4a1a4999e19dd5660e3c557a2c6afb8b52f504a4365709fe09b3784.exe
Resource
win10v2004-20220901-en
General
-
Target
cd746b20e4a1a4999e19dd5660e3c557a2c6afb8b52f504a4365709fe09b3784
-
Size
352KB
-
MD5
2a152c4b46a76b95b32e42d438aa5a90
-
SHA1
1d3b8b18f47568aa419f0613af6573b919d96fa0
-
SHA256
cd746b20e4a1a4999e19dd5660e3c557a2c6afb8b52f504a4365709fe09b3784
-
SHA512
4d5af7385644f10ea6872e912ad7c42774f31a489676e322181253dd1a5e2e3d96bfcf324d06288721ca0daf44b3897eab22706d8d4fda2ade2961f8428148e2
-
SSDEEP
6144:pioHZn6nvYqAOBVVW7bO1ENnRlyr8VEoNR6VJKKq8gnk3ViAAmZga4UNBqb:pTyTDVGbPnTyEyMMgnO0laRN
Malware Config
Signatures
Files
-
cd746b20e4a1a4999e19dd5660e3c557a2c6afb8b52f504a4365709fe09b3784.exe windows x86
fd145841c8d854c9cce1c426d7019bd6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateThread
GetLastError
VirtualFreeEx
ExitProcess
Sleep
VirtualAlloc
GetModuleHandleA
GetProcAddress
GetCurrentThread
HeapFree
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
LoadLibraryA
RtlUnwind
HeapReAlloc
HeapAlloc
user32
LoadIconA
IsIconic
advapi32
CryptAcquireContextA
CryptGenKey
ole32
CoUninitialize
avifil32
AVISaveOptionsFree
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 236KB - Virtual size: 778KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ