Static task
static1
Behavioral task
behavioral1
Sample
646c62ff804b4f48d885972706cd7c204811a9db25ea1dbc1e9eaf1434a8fb5b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
646c62ff804b4f48d885972706cd7c204811a9db25ea1dbc1e9eaf1434a8fb5b.exe
Resource
win10v2004-20220812-en
General
-
Target
646c62ff804b4f48d885972706cd7c204811a9db25ea1dbc1e9eaf1434a8fb5b
-
Size
164KB
-
MD5
10f934fbfb829947efc5fe0e361af95a
-
SHA1
bafa8e4bdb8a3f5a5e3c66fed75007f51851bb15
-
SHA256
646c62ff804b4f48d885972706cd7c204811a9db25ea1dbc1e9eaf1434a8fb5b
-
SHA512
5d825947d4ed5a6e9c032216f1a361974d0147a52e8fa133c0beead16b606825f1a64552f239d93ecc64bfab2fba92782a12ed17afc3fe729474dba9b86d3247
-
SSDEEP
1536:rGSV5jGnlQo0cg5hhCdrY+HbBkm+on5FO:KSVZwQo0cg5hhC1Sm+o5FO
Malware Config
Signatures
Files
-
646c62ff804b4f48d885972706cd7c204811a9db25ea1dbc1e9eaf1434a8fb5b.exe windows x86
95d810448ec9dff9e82f646e399dc27e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DispatchMessageA
TranslateMessage
GetMessageA
DefWindowProcA
PostQuitMessage
RegisterClassExA
LoadIconA
LoadCursorA
UpdateWindow
CreateWindowExA
ShowWindow
gdi32
GetStockObject
kernel32
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
CloseHandle
FlushFileBuffers
SetFilePointer
LCMapStringW
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
IsBadWritePtr
IsBadReadPtr
HeapValidate
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
HeapFree
VirtualFree
GetOEMCP
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
GetACP
MultiByteToWideChar
RtlUnwind
HeapAlloc
HeapReAlloc
GetLastError
VirtualAlloc
SetConsoleCtrlHandler
GetCPInfo
Sections
.text Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ