Static task
static1
Behavioral task
behavioral1
Sample
22efcc1bc26067f886faf501aee60f1cbc8ba05078d316a4df89fbced0ea84b3.exe
Resource
win7-20220311-en
Behavioral task
behavioral2
Sample
22efcc1bc26067f886faf501aee60f1cbc8ba05078d316a4df89fbced0ea84b3.exe
Resource
win10v2004-20220331-en
General
-
Target
22efcc1bc26067f886faf501aee60f1cbc8ba05078d316a4df89fbced0ea84b3
-
Size
279KB
-
MD5
9e448f4628fdd271af8c14fcebcf7619
-
SHA1
9c1f14f19b60654332a04d316cef95f80d7b8ba0
-
SHA256
22efcc1bc26067f886faf501aee60f1cbc8ba05078d316a4df89fbced0ea84b3
-
SHA512
1ba26d981e8116c7efe692489882c320df17d2f3c216beedd100308222be7e09faf251a84b35f33ad7ec3a5a21627bb053393e851b23366c226a7b6b0dcdee6f
Malware Config
Signatures
Files
-
22efcc1bc26067f886faf501aee60f1cbc8ba05078d316a4df89fbced0ea84b3.exe windows x86
3387a3592629261940cdc4764a709ef2
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetPriorityClass
SetThreadContext
TlsGetValue
SetLocalTime
GetUserDefaultLCID
_lcreat
SetTapeParameters
GetModuleHandleW
GetTickCount
GetSystemTimeAsFileTime
ReadConsoleW
SetProcessPriorityBoost
GlobalAlloc
GetPrivateProfileIntA
LoadLibraryW
GetConsoleMode
TerminateThread
Sleep
WritePrivateProfileStructW
EnumResourceNamesW
lstrcatA
lstrlenW
SetThreadPriority
DeactivateActCtx
GetNamedPipeHandleStateW
GetLargestConsoleWindowSize
GetProcAddress
GetTapeStatus
SetVolumeLabelW
ReadFileEx
SearchPathA
CreateSemaphoreW
SetCurrentDirectoryW
AddAtomA
GetPrivateProfileStructA
VirtualProtect
CloseHandle
lstrcpyA
GetBinaryTypeA
FileTimeToDosDateTime
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
GetCPInfo
RtlUnwind
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentProcessId
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
CreateFileA
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetModuleFileNameA
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeA
HeapSize
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleCP
SetFilePointer
SetEndOfFile
GetProcessHeap
ReadFile
LoadLibraryA
GetModuleHandleA
GetLocaleInfoW
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
gdi32
GetCharWidthA
Sections
.text Size: 241KB - Virtual size: 241KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ