Static task
static1
Behavioral task
behavioral1
Sample
44bf26d3f32a2b50e6e11c9dddc02b4ff80110f0880abf32781089e8ee74be2d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
44bf26d3f32a2b50e6e11c9dddc02b4ff80110f0880abf32781089e8ee74be2d.exe
Resource
win10v2004-20220901-en
General
-
Target
44bf26d3f32a2b50e6e11c9dddc02b4ff80110f0880abf32781089e8ee74be2d
-
Size
270KB
-
MD5
3fd596e1130c290d6265707cc09d7086
-
SHA1
8be8d8c48dbbedf06cd0ac34ed49b807027b863a
-
SHA256
44bf26d3f32a2b50e6e11c9dddc02b4ff80110f0880abf32781089e8ee74be2d
-
SHA512
130a1ea6104721ef7d481d9f84621d8e4e4e313b8ba739feacbd42cce536e31ee46c861bbe74fe4d691a05ca416ad3527fc2243b99c96b79f26b71e8fa602710
-
SSDEEP
6144:LBqKTgj5IyYSDyH9O3YqdhoL1ofnmyJlSGtExQtgwmI7uRGj:jA5QZ0hm1OX1tZqwnC
Malware Config
Signatures
Files
-
44bf26d3f32a2b50e6e11c9dddc02b4ff80110f0880abf32781089e8ee74be2d.exe windows x86
6ddc9b6956ae751625f27f0743ee05c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFileTimeToFileTime
SystemTimeToTzSpecificLocalTime
EnumResourceLanguagesW
WriteFile
QueryPerformanceCounter
GetConsoleCursorInfo
HeapAlloc
LoadLibraryA
InitializeCriticalSectionAndSpinCount
ExitProcess
lstrcmpA
GetSystemDirectoryW
GetPrivateProfileSectionA
GetPrivateProfileStructW
InterlockedExchange
GetTickCount
WaitForSingleObjectEx
GetModuleHandleA
CreateDirectoryW
GlobalReAlloc
RtlUnwind
TerminateProcess
GetModuleFileNameA
HeapReAlloc
GetDriveTypeA
GetCurrentThreadId
VirtualAlloc
RemoveDirectoryA
GetProcAddress
VirtualQueryEx
GetCurrentProcess
HeapFree
GetFullPathNameA
GetLongPathNameW
Sleep
GetCurrentProcessId
VirtualQuery
SetThreadPriority
CreateNamedPipeW
GetSystemTimeAsFileTime
comdlg32
PageSetupDlgW
advapi32
RegEnumKeyW
StartServiceA
CryptContextAddRef
wininet
InternetSetCookieW
GopherGetAttributeW
GetUrlCacheConfigInfoW
IncrementUrlCacheHeaderData
InternetAlgIdToStringA
InternetQueryFortezzaStatus
FtpPutFileEx
RunOnceUrlCache
InternetWriteFileExW
HttpQueryInfoA
InternetOpenA
Sections
.text Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ