Static task
static1
Behavioral task
behavioral1
Sample
d46591080d68208e611636a83c5437231c1664ce8628b7e2f0fdc5e598ec24cc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d46591080d68208e611636a83c5437231c1664ce8628b7e2f0fdc5e598ec24cc.exe
Resource
win10v2004-20221111-en
General
-
Target
d46591080d68208e611636a83c5437231c1664ce8628b7e2f0fdc5e598ec24cc
-
Size
637KB
-
MD5
966e113ebcff5ff7a29e4d3471f4565f
-
SHA1
2c05dc11189ee7fcbd8558f4ff4d19bbe80f015a
-
SHA256
d46591080d68208e611636a83c5437231c1664ce8628b7e2f0fdc5e598ec24cc
-
SHA512
1d2df529fd096a359d40d9448b6850da387cd7e3c7058e8762f368dce9203b16c0c134ed90c8bcfdf2f88a5e4ad6ba4d52acfd6a87edbdb250d8de95bbe2b624
-
SSDEEP
12288:SgA+k6FrHtj1mzhTBGST08aQMh0+LoaccKU53N4cm9A08/:nA+ky1mzh8g5arh0+0n44cm9p
Malware Config
Signatures
Files
-
d46591080d68208e611636a83c5437231c1664ce8628b7e2f0fdc5e598ec24cc.exe windows x86
67e6519cccff919260b6907f2918c432
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
TlsGetValue
CompareFileTime
GetProfileIntA
CloseHandle
HeapWalk
LoadLibraryA
GetAtomNameA
GetTickCount
GetConsoleCP
GetVersion
VirtualProtect
InterlockedExchange
FindAtomA
GetACP
GetStdHandle
WaitForSingleObject
GlobalUnlock
TlsFree
GetModuleHandleA
HeapReAlloc
user32
PostQuitMessage
DialogBoxParamA
GetWindowTextA
ShowWindow
DestroyMenu
EqualRect
DispatchMessageA
CopyRect
EnableScrollBar
PaintDesktop
SetWindowPos
GetKeyboardLayout
GetScrollRange
SubtractRect
GetMenuStringA
MessageBoxA
GetDlgItem
UpdateWindow
CreateCaret
SetPropA
InflateRect
LoadIconA
GetMenu
InsertMenuA
TranslateMessage
PostMessageA
ModifyMenuA
msi
MsiDoActionA
MsiEnumClientsA
MsiGetMode
MsiCloseHandle
MsiEnumProductsA
ws2_32
WSAAccept
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ