Static task
static1
Behavioral task
behavioral1
Sample
45ff848a7292f5fa3ceccabefedf637f4a6c77f373e310ee9e04de7fd230b40b.exe
Resource
win10v2004-20230220-en
General
-
Target
45ff848a7292f5fa3ceccabefedf637f4a6c77f373e310ee9e04de7fd230b40b
-
Size
676KB
-
MD5
ea2f8aa6c71ea98450efdf5d62d4660a
-
SHA1
cc2f3e843d8be20b2e40a59f65f0a141b7c626a9
-
SHA256
45ff848a7292f5fa3ceccabefedf637f4a6c77f373e310ee9e04de7fd230b40b
-
SHA512
0777104442c758e269d29fbb684ebfdb6799837a4c4d3d8c66e7b3198849c83ddab6c4a5041349b81ac346edc59400112513d878f4ab3b4449d5e61f088c10d3
-
SSDEEP
12288:PuUgE4Gp1YklCr/DgqbbuTjy+Yh2CQhiRBISoxGMmDZy8rwnwtvlxTfOIcly7A36:PuQRMMQuvy+YCvdGlE8snwtvm9lR36
Malware Config
Signatures
Files
-
45ff848a7292f5fa3ceccabefedf637f4a6c77f373e310ee9e04de7fd230b40b.exe windows x86
3b9c426a6fdec2cb62dc7c138a0d2616
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
GetWindowsDirectoryA
FindFirstVolumeMountPointW
FindFirstChangeNotificationA
WaitForSingleObject
ReadConsoleInputW
VerifyVersionInfoA
GetVersionExA
GetCurrentProcess
OpenEventA
CreateFileMappingW
SetLocaleInfoW
GetProcAddress
GlobalAlloc
GetConsoleTitleW
DeleteFileA
FindResourceW
GetLongPathNameA
GetBinaryTypeA
SetLastError
GetProfileSectionA
WriteProfileStringW
GetComputerNameExW
GetConsoleMode
WriteProfileSectionW
SetVolumeMountPointA
EnumResourceLanguagesA
CommConfigDialogA
EnumDateFormatsA
DeleteVolumeMountPointA
GetModuleHandleA
ZombifyActCtx
WritePrivateProfileStringW
GetSystemDirectoryA
GetStringTypeW
GetShortPathNameW
EnumCalendarInfoA
VerifyVersionInfoW
EnumCalendarInfoW
FindNextFileW
ReleaseActCtx
BuildCommDCBAndTimeoutsA
GetCurrentActCtx
FindFirstFileW
WriteConsoleW
GetConsoleAliasA
LoadLibraryA
HeapReAlloc
MultiByteToWideChar
RaiseException
RtlUnwind
GetLastError
HeapFree
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
IsProcessorFeaturePresent
HeapAlloc
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
GetCurrentThreadId
InterlockedDecrement
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapSize
SetStdHandle
WideCharToMultiByte
GetConsoleCP
FlushFileBuffers
LoadLibraryW
LCMapStringW
SetFilePointer
user32
LoadMenuA
GetMessagePos
advapi32
RevertToSelf
shell32
FindExecutableW
ole32
CoGetInstanceFromFile
Sections
.text Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 585KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ