Static task
static1
Behavioral task
behavioral1
Sample
44f97a8de942b57ff0a490accfd01bc5997489994122f5bf35e745d01f0eb4fe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
44f97a8de942b57ff0a490accfd01bc5997489994122f5bf35e745d01f0eb4fe.exe
Resource
win10v2004-20220812-en
General
-
Target
44f97a8de942b57ff0a490accfd01bc5997489994122f5bf35e745d01f0eb4fe
-
Size
106KB
-
MD5
c22b1a438dfd4b7778f2b4f5e68308d1
-
SHA1
baeb8cd3252840f5a789001fba12f86f40cc74a9
-
SHA256
44f97a8de942b57ff0a490accfd01bc5997489994122f5bf35e745d01f0eb4fe
-
SHA512
fe6f66a3522410b3fa6d8840d1b5f25ce8320e75df5761dff87688523a21ce9c196a888b0133ec41f8bf8b4fbb175342bb330197eba8f8f8e25b69739cf69dd5
-
SSDEEP
3072:rhV0ctkUZoYZNKDMTXpsO9VofL2CpSXA8:k29Ni/O9VOLej
Malware Config
Signatures
Files
-
44f97a8de942b57ff0a490accfd01bc5997489994122f5bf35e745d01f0eb4fe.exe windows x86
5594b9fac15f2d0a57e6ebb015b5f8ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
CopyFileA
SetFileAttributesA
lstrcatA
lstrcpyA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetLastError
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
WriteFile
ReadFile
HeapFree
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
SetStdHandle
HeapAlloc
VirtualAlloc
HeapReAlloc
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 77KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ