_nPeNR
Static task
static1
Behavioral task
behavioral1
Sample
22d0ba3ebf5774e5fb3b862cfa689a5a29d4e8a35e2f3fdf130bdca7e436ae2d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
22d0ba3ebf5774e5fb3b862cfa689a5a29d4e8a35e2f3fdf130bdca7e436ae2d.exe
Resource
win10v2004-20220901-en
General
-
Target
22d0ba3ebf5774e5fb3b862cfa689a5a29d4e8a35e2f3fdf130bdca7e436ae2d
-
Size
148KB
-
MD5
43885a431302eac5972279d1138e9fa3
-
SHA1
a4d7ebd8f088d00956fd8b000aaf57f5ec3ea398
-
SHA256
22d0ba3ebf5774e5fb3b862cfa689a5a29d4e8a35e2f3fdf130bdca7e436ae2d
-
SHA512
2ea71fcdf879d884c7644bd65230d32b7071f5eeb4ae3fa7a8d7aa4c6829ff84f86a8c4348d4ce9393573a019f496b1aa22a4dda1e9c36808318c07b9382ec5d
-
SSDEEP
3072:uCBVRB1xNovQFn0X6EXaTQPOgsI/SmMefJ96GnoZZ16zJx:uC7Jf5M6DMcIFbP78r
Malware Config
Signatures
Files
-
22d0ba3ebf5774e5fb3b862cfa689a5a29d4e8a35e2f3fdf130bdca7e436ae2d.exe windows x86
19cc35e53f674d564b73fb550b90541d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
GetModuleHandleW
Sleep
GlobalAlloc
LoadLibraryA
MulDiv
GetVersionExA
FindResourceA
LoadLibraryExA
GetStringTypeW
GetStartupInfoA
ExitThread
ResetEvent
VirtualAllocEx
GetStdHandle
GetProcessHeap
GetModuleFileNameA
VirtualAlloc
VirtualFree
GetModuleHandleA
GetLocalTime
ReadFile
ExitProcess
GetCurrentThreadId
GetThreadLocale
user32
UpdateWindow
OpenIcon
IsWindow
WaitMessage
GetMenu
CharUpperA
GetSystemMetrics
CharNextA
wsprintfA
WindowFromPoint
advapi32
RegCreateKeyA
RegDeleteKeyA
RegCreateKeyExA
GetLengthSid
shell32
DragQueryFileA
Exports
Exports
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mdata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ