Static task
static1
Behavioral task
behavioral1
Sample
2dd1f46406e90b8b57ac49bdba45e4f279db5604921df3921f945e72c28d6820.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2dd1f46406e90b8b57ac49bdba45e4f279db5604921df3921f945e72c28d6820.exe
Resource
win10-20230220-en
General
-
Target
2dd1f46406e90b8b57ac49bdba45e4f279db5604921df3921f945e72c28d6820
-
Size
726.0MB
-
MD5
c3a17b0e7d83d4eff77f17b5ce764e14
-
SHA1
accbe20f2588372910baac8636d60719d7a6b56f
-
SHA256
2dd1f46406e90b8b57ac49bdba45e4f279db5604921df3921f945e72c28d6820
-
SHA512
86334bf19f9179d440e68bbf8ab4fd11ee45bd6015f8d6842cf87c0e98086528adc8da033bcca39c7f4fed76f18e4dcb4e68820745158580681e1e9b47c1e7bd
-
SSDEEP
196608:FVi+d3U/4jzIVa48fwWTL7oO30d/3qMbElQ:rP6qzIVa4uwWTX+fqMbT
Malware Config
Signatures
Files
-
2dd1f46406e90b8b57ac49bdba45e4f279db5604921df3921f945e72c28d6820.exe windows x86
546b9a4103a2201fcaf023a64f90e71f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeviceIoControl
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
EmptyClipboard
CharUpperBuffW
advapi32
RegSetValueExA
shell32
ShellExecuteA
wininet
InternetCloseHandle
Sections
.text Size: - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yMF Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.t#H Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jP& Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 380KB - Virtual size: 383KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ