Static task
static1
Behavioral task
behavioral1
Sample
822a264191230f753546407a823c6993e1a83a83a75fa36071a874318893afb8.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
822a264191230f753546407a823c6993e1a83a83a75fa36071a874318893afb8.exe
Resource
win10v2004-en-20220113
General
-
Target
822a264191230f753546407a823c6993e1a83a83a75fa36071a874318893afb8
-
Size
747KB
-
MD5
87239ce48fc8196a5ab66d8562f48f26
-
SHA1
56ae990e9e55c3c842dc10d86815f3913bb408d3
-
SHA256
822a264191230f753546407a823c6993e1a83a83a75fa36071a874318893afb8
-
SHA512
9b5a6a9d05ec673eccae33e20472bc74553aef7085cc74c984c051bdb165996ce7744de68bb122f28cfb88707d08b41fcb07681ff4ef329bf6d1e051991aeb45
-
SSDEEP
12288:aVSqKHBKsLlPqnk7HLhccQ5VSdQpRSZZLPI9dLz6:aV/GP4k71cXrEEw/PI9dLz6
Malware Config
Signatures
Files
-
822a264191230f753546407a823c6993e1a83a83a75fa36071a874318893afb8.exe windows x86
328b55d7361b19110d70701a0441a720
Code Sign
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetProcAddress
VirtualAlloc
VirtualProtect
LoadLibraryA
GetProcessId
ExitProcess
lstrcmpA
lstrlenA
lstrcatA
comctl32
InitCommonControls
oledlg
OleUIChangeSourceA
oleacc
ObjectFromLresult
gdiplus
GdipGetImageDecoders
Sections
.text Size: 635KB - Virtual size: 635KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 18B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 50B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE