Static task
static1
Behavioral task
behavioral1
Sample
22311380e611e75a39daa82b9cd55990709055d71b92d4c832c0bf8de4b75f69.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
22311380e611e75a39daa82b9cd55990709055d71b92d4c832c0bf8de4b75f69.exe
Resource
win10v2004-20220812-en
General
-
Target
22311380e611e75a39daa82b9cd55990709055d71b92d4c832c0bf8de4b75f69
-
Size
370KB
-
MD5
7000ac20b6ec0d2e6eaf04142e7d81ba
-
SHA1
0fd1ef4c99ce79b49266bd39b06d215513350369
-
SHA256
22311380e611e75a39daa82b9cd55990709055d71b92d4c832c0bf8de4b75f69
-
SHA512
51a74bb7435416179c6975b0ff7480f729d2ec0369afaad7a26918bdc10545e40397f7bc0d3520113952bf5e88c660631c6be54c7713c3462f929500fbcd2716
-
SSDEEP
6144:8JbUGyC2Cy8fumy5UGR6go/pnGSBR0HfYHkImafR7pgXcHBf5NUpY/HzERKK:052CFumQUGQgoRGM0HfYAkRZd5mW/Hg
Malware Config
Signatures
Files
-
22311380e611e75a39daa82b9cd55990709055d71b92d4c832c0bf8de4b75f69.exe windows x86
ee95be16b9afbd94236ae665d768258d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
LocalFree
CreateThread
GetACP
FreeConsole
GetDriveTypeW
InterlockedExchange
GlobalFree
ResetEvent
CloseHandle
GetExitCodeProcess
FindVolumeClose
lstrlenA
LocalSize
GetMailslotInfo
ReadFile
GetModuleHandleW
GetPrivateProfileIntW
VirtualAlloc
CreateFileW
user32
GetClientRect
GetKeyboardType
GetSysColor
IsIconic
SetFocus
EndDialog
CallWindowProcW
DispatchMessageA
GetCursorInfo
GetDlgItem
CreateWindowExA
GetClassInfoA
DrawStateW
dsprop
CheckADsError
CheckADsError
CheckADsError
CheckADsError
ReportError
desk.cpl
InstallScreenSaverW
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 360KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ