?Dll2Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
c48dd6c0d7f649c1d6fffc502ba02300e171a9e85ae6589bc212dad17edf83ff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c48dd6c0d7f649c1d6fffc502ba02300e171a9e85ae6589bc212dad17edf83ff.exe
Resource
win10v2004-20220812-en
General
-
Target
c48dd6c0d7f649c1d6fffc502ba02300e171a9e85ae6589bc212dad17edf83ff
-
Size
264KB
-
MD5
4b950e259fd6c1abf7154b54dea3dfd6
-
SHA1
ab79d21d94ebe63ea88597927a145dbd149181ed
-
SHA256
c48dd6c0d7f649c1d6fffc502ba02300e171a9e85ae6589bc212dad17edf83ff
-
SHA512
44ee037da905409bc7cdc5bf7f944fc98e5de3db64a15c65825bb53731431d2866f49d0da27e6e92970fbbbc5d233ca2f043233e7e0d908fa44ceb3794f21811
-
SSDEEP
6144:87ibd7InvijcZPOlWOZ0O8No4gO6yIlD8:1IvtBzrG66yI6
Malware Config
Signatures
Files
-
c48dd6c0d7f649c1d6fffc502ba02300e171a9e85ae6589bc212dad17edf83ff.exe windows x86
f6fa93597a4536dfedd81a900d1e9576
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToFileA
wininet
DeleteUrlCacheEntry
msvcrt
_controlfp
kernel32
GetStartupInfoA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
user32
wsprintfA
MessageBoxA
advapi32
RegSetValueExA
shell32
SHGetSpecialFolderPathA
ole32
CoCreateGuid
shlwapi
PathFileExistsA
Exports
Exports
Sections
.text Size: - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bad0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.bad1 Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ