Static task
static1
Behavioral task
behavioral1
Sample
22ab040d8a65ef9c9874e7dc800a6056ef85486a709f0d3a0ec5a4a079fce89e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
22ab040d8a65ef9c9874e7dc800a6056ef85486a709f0d3a0ec5a4a079fce89e.exe
Resource
win10v2004-20220812-en
General
-
Target
22ab040d8a65ef9c9874e7dc800a6056ef85486a709f0d3a0ec5a4a079fce89e
-
Size
312KB
-
MD5
a522db502a2f543cd9fdad24f195a477
-
SHA1
af605b8f3f4377a563e152804024a881352fc705
-
SHA256
22ab040d8a65ef9c9874e7dc800a6056ef85486a709f0d3a0ec5a4a079fce89e
-
SHA512
fc936aec8ddc9fded5319b418ac94f45f07d61d723fc910bd89a6586056a332cc4f98c7ccb4c898d97363d1ede769e0df6aa9fbe68b7a0e67d155d446966b8c8
-
SSDEEP
6144:YfG4WB6ycJpBHIoReOyS4nUrqmiuFFDZhyLl13OUz/8m10h:YfG4tRsnS4UZiMJZ4BYUZmh
Malware Config
Signatures
Files
-
22ab040d8a65ef9c9874e7dc800a6056ef85486a709f0d3a0ec5a4a079fce89e.exe windows x86
290f3a71e24352d422a8c989eca46cbb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleA
RaiseException
InterlockedExchange
GetLocaleInfoA
FreeEnvironmentStringsA
GetCompressedFileSizeA
GetSystemDirectoryA
GetCurrentProcess
GetStdHandle
GetCommandLineA
OpenSemaphoreA
VirtualProtect
GetCurrentThread
IsDebuggerPresent
GetACP
GetModuleHandleA
GlobalFree
GetCurrentProcessId
SetEvent
FlushFileBuffers
HeapCreate
user32
IsIconic
ReleaseDC
SetForegroundWindow
ValidateRgn
ShowWindow
wsprintfA
GetParent
GetClassNameA
GetWindowTextLengthA
BeginPaint
FillRect
GetFocus
SetActiveWindow
GetWindow
EndPaint
GetCursorPos
FrameRect
GetDlgItem
DrawTextA
linkinfo
GetLinkInfoData
GetCanonicalPathInfoA
ResolveLinkInfoA
IsValidLinkInfo
DestroyLinkInfo
rtutils
LogEventA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ