Static task
static1
Behavioral task
behavioral1
Sample
46b241f63384e8e943b1c0ae780eddd0.exe
Resource
win7-20230220-en
General
-
Target
46b241f63384e8e943b1c0ae780eddd0.exe
-
Size
370KB
-
MD5
46b241f63384e8e943b1c0ae780eddd0
-
SHA1
710dcabb5da1647d5c8ffcbf0d83122be53361b2
-
SHA256
b14c6093ebf544c55a6f3945db86881c61bf06c5b7cb2017c10ce1ef9480460e
-
SHA512
8fe6e182b4034691ee431cb7c115f8735698b433dd82183119dee324eb8b2bb69db7aeade6dd7636198f432097e80ec5f1b7eaf716ccf709bb3ea78daed2e8eb
-
SSDEEP
6144:AqlASMp5H5Dh6MQFFU+dGAwuFSAfqI7HohOTHC:dlASo5H5D0MkU1oSC7Hoq
Malware Config
Signatures
Files
-
46b241f63384e8e943b1c0ae780eddd0.exe.exe windows x64
57b146c278fb2ac0214007b236451fbd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
LoadLibraryA
GetProcAddress
FreeLibrary
CreateDirectoryW
GetVolumeInformationW
FindFirstFileW
FindNextFileW
ExpandEnvironmentStringsW
GetModuleFileNameW
GetEnvironmentVariableW
CreateMutexW
FindClose
GetFileAttributesW
Sleep
GetLastError
CloseHandle
lstrlenA
GetComputerNameW
CreateProcessW
CopyFileW
lstrcpyW
lstrcmpW
MultiByteToWideChar
ReadFile
WriteFile
RemoveDirectoryW
GetTempPathW
CreateFileW
DeleteFileW
GetFileSize
WideCharToMultiByte
WriteConsoleW
HeapSize
SetEndOfFile
ExitProcess
lstrlenW
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
HeapReAlloc
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetTimeZoneInformation
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
HeapFree
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetFileType
SetFileTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
GetModuleHandleExW
GetStdHandle
HeapAlloc
user32
wsprintfW
advapi32
GetUserNameW
shell32
ShellExecuteW
ole32
StringFromGUID2
ws2_32
socket
bind
inet_addr
listen
closesocket
wininet
InternetCloseHandle
InternetSetOptionW
InternetReadFile
InternetOpenW
InternetQueryDataAvailable
InternetQueryOptionW
HttpOpenRequestW
InternetConnectW
HttpSendRequestW
InternetCrackUrlW
urlmon
ObtainUserAgentString
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
shlwapi
wnsprintfW
StrCmpNIW
StrNCatW
PathCombineW
wnsprintfA
StrCmpNA
Sections
.text Size: 256KB - Virtual size: 255KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ