Static task
static1
Behavioral task
behavioral1
Sample
b44e2bfc920d81232e44253a7b71b124a14f08a1397d3ee0b519dc0d604e6033.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b44e2bfc920d81232e44253a7b71b124a14f08a1397d3ee0b519dc0d604e6033.exe
Resource
win10v2004-20220901-en
General
-
Target
b44e2bfc920d81232e44253a7b71b124a14f08a1397d3ee0b519dc0d604e6033
-
Size
161KB
-
MD5
80d63e8310cbd452bd610f1d1597db90
-
SHA1
56330752d9cd13af812c75a4ce684d125b49aff7
-
SHA256
b44e2bfc920d81232e44253a7b71b124a14f08a1397d3ee0b519dc0d604e6033
-
SHA512
dcffe5075bbc940e84e45939b4d56547a9b12ac2d940de038d660a557d96027bb1714bfd5df6b96564946fa8760c6bb5baf03bd08d6632b9bf0070e8c4d1a45e
-
SSDEEP
3072:X0pR/jlXsk4qM3HOlDFnnEGri6CmtRDVrZBI5c:NjqaH87rtCmJB
Malware Config
Signatures
Files
-
b44e2bfc920d81232e44253a7b71b124a14f08a1397d3ee0b519dc0d604e6033.exe windows x86
16007ccfe5ecc6f9716f8cd88d4a96da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_except_handler3
__p__commode
__p___initenv
__p__fmode
_adjust_fdiv
_exit
_XcptFilter
_initterm
_controlfp
__getmainargs
__set_app_type
kernel32
GetModuleFileNameA
OutputDebugStringA
GetCurrentDirectoryA
InterlockedIncrement
GetWindowsDirectoryA
GetDriveTypeA
GetProcessHeap
GetSystemDirectoryA
GetCurrentProcessId
GetTempPathA
SystemTimeToFileTime
RtlUnwind
GetFileType
GetModuleHandleW
FlushFileBuffers
LocalFree
IsDBCSLeadByte
Sleep
CreateDirectoryA
GetCurrentThread
GlobalReAlloc
GetModuleHandleA
ExitProcess
GetVersionExA
LoadResource
SetFileTime
LoadLibraryW
VirtualFree
GetStartupInfoA
GetExitCodeProcess
VirtualProtect
SetEnvironmentVariableA
MultiByteToWideChar
LocalFileTimeToFileTime
WriteConsoleA
GetEnvironmentStringsW
DeleteFileA
GetStdHandle
GetSystemTime
lstrcmpA
QueryPerformanceCounter
GetPrivateProfileStringA
CopyFileA
GetStringTypeA
GetFileAttributesW
GetLastError
WritePrivateProfileStringA
GetThreadLocale
Sections
.text Size: 1024B - Virtual size: 812B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ