Static task
static1
Behavioral task
behavioral1
Sample
c822f2b32cd25f79e891f8a9bbba905158dbd81f04cde8b4c177b1ca8054816b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c822f2b32cd25f79e891f8a9bbba905158dbd81f04cde8b4c177b1ca8054816b.exe
Resource
win10v2004-20220812-en
General
-
Target
c822f2b32cd25f79e891f8a9bbba905158dbd81f04cde8b4c177b1ca8054816b
-
Size
17KB
-
MD5
686486fd9cc3cbb43d38f69d9345e830
-
SHA1
ed4252d66355000e69275856451e321e3f079fb3
-
SHA256
c822f2b32cd25f79e891f8a9bbba905158dbd81f04cde8b4c177b1ca8054816b
-
SHA512
2102c78bbe40da00322a48f79d7ba7d5b0edb97df274160efab609700fe1ab9613aeb662715fa990469d066f182c6f6ef0aa1aa1c09820d8fa5974d97a0ed881
-
SSDEEP
384:BVSMrlfwYsjwzjJxdccccd3/z6KXmmex/:dJYKjdccccV/Gxx/
Malware Config
Signatures
Files
-
c822f2b32cd25f79e891f8a9bbba905158dbd81f04cde8b4c177b1ca8054816b.exe windows x86
7c8c0feaa92e2d5c6a2b673f936d67d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
GetCurrentProcess
GetSystemDirectoryA
OpenSemaphoreA
GlobalFree
GetStdHandle
VirtualProtect
GetModuleHandleA
IsDebuggerPresent
GetCurrentProcessId
FreeEnvironmentStringsA
GetCurrentThread
GetCommandLineA
FlushFileBuffers
GetLocaleInfoA
WriteConsoleA
InterlockedExchange
RaiseException
GetCompressedFileSizeA
GetACP
HeapCreate
user32
ValidateRgn
SetActiveWindow
GetCursorPos
IsIconic
FillRect
EndPaint
wsprintfA
GetWindowTextLengthA
FrameRect
GetFocus
ReleaseDC
GetParent
GetWindow
SetForegroundWindow
DrawTextA
GetClassNameA
BeginPaint
GetDlgItem
ShowWindow
linkinfo
IsValidLinkInfo
GetLinkInfoData
DestroyLinkInfo
ResolveLinkInfoA
GetCanonicalPathInfoA
rtutils
LogEventA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ