Static task
static1
Behavioral task
behavioral1
Sample
44306c6559ab67b7ac070886429a0e4b313bf9f37e57de3fce821ce1f468ba6d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
44306c6559ab67b7ac070886429a0e4b313bf9f37e57de3fce821ce1f468ba6d.exe
Resource
win10v2004-20220812-en
General
-
Target
44306c6559ab67b7ac070886429a0e4b313bf9f37e57de3fce821ce1f468ba6d
-
Size
572KB
-
MD5
61d1365185891f86bdf5d9579152c006
-
SHA1
e95171cdc56f4b1c2fbb5efb70afdcc5fd3e63fe
-
SHA256
44306c6559ab67b7ac070886429a0e4b313bf9f37e57de3fce821ce1f468ba6d
-
SHA512
33dda6d38bd6cf2b5b5659c4fcc41a48bd3897839b5f1f2d79ddf9e5ff82e2923edc543379629ecc47ac7115d93b7d3abdff7762ca169206e58860201579a3fe
-
SSDEEP
12288:WBwb2a04AqQCyp5gzmMAWZmkGxNe+lr7UKO+HOd1MxQ:Wyb2k3y7gzcNBHXqi6
Malware Config
Signatures
Files
-
44306c6559ab67b7ac070886429a0e4b313bf9f37e57de3fce821ce1f468ba6d.exe windows x86
50a391d6ca4dba542b797ba223733c0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetCurrentProcessId
GetCurrentThreadId
GetCurrentThread
GetVersion
GetModuleHandleA
GetTickCount
ExitProcess
GetCommandLineA
VirtualAlloc
LeaveCriticalSection
HeapCreate
CloseHandle
FormatMessageA
FindClose
LoadResource
InitializeCriticalSection
TerminateProcess
LocalFree
FindNextFileA
CreateFileMappingA
GetSystemTimeAsFileTime
GetConsoleCP
GetStartupInfoA
WriteFile
SetUnhandledExceptionFilter
ReadFile
GetCPInfo
CompareStringA
SetStdHandle
GetProcessHeap
GetProcAddress
SetEvent
LoadLibraryExW
DeleteFileA
GetFileSize
GetStringTypeW
GetConsoleMode
GetEnvironmentStrings
GetCurrentProcess
LoadLibraryA
HeapAlloc
GetOEMCP
GetVersionExW
WaitForSingleObject
GlobalFree
lstrlenA
SetHandleCount
ReleaseMutex
EnterCriticalSection
HeapFree
user32
TrackPopupMenu
CreateWindowExA
GetWindowLongA
ScreenToClient
GetDlgItem
IsWindowVisible
TranslateMessage
SetWindowLongA
SetDlgItemTextA
GetWindowRect
ShowWindow
PostQuitMessage
EndDialog
Sections
.text Size: 539KB - Virtual size: 862KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ