Static task
static1
Behavioral task
behavioral1
Sample
44056f6d4229f1f864b385db4a7589274c22f5710d9f608e7196351e19322cf8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
44056f6d4229f1f864b385db4a7589274c22f5710d9f608e7196351e19322cf8.exe
Resource
win10v2004-20220812-en
General
-
Target
44056f6d4229f1f864b385db4a7589274c22f5710d9f608e7196351e19322cf8
-
Size
260KB
-
MD5
78a39b9b696c93ef921ae4ad0c9c7289
-
SHA1
b60289d984be34da9aea9a4cec04eeab3071367a
-
SHA256
44056f6d4229f1f864b385db4a7589274c22f5710d9f608e7196351e19322cf8
-
SHA512
ac9ba7bc79c7bcead3a6e7c5f0415572d84b8e4ec842c3ae39e645ee1e45da6ebf894888e38990693b19e71127eb2d0ecadd1fb6509624b5a524cfd3d006074c
-
SSDEEP
6144:Vdwl5H9D+tlN6nP1/X6WVg5SEI4EmfUVsCGwmJIne:jgT+tlN6P1/XXVqS7vmXpZOne
Malware Config
Signatures
Files
-
44056f6d4229f1f864b385db4a7589274c22f5710d9f608e7196351e19322cf8.exe windows x86
c17f30e67ad74e3e59070d532df2c18b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
strcmp
memmove
memcpy
_CIlog10
strlen
kernel32
GetModuleHandleA
HeapCreate
LoadLibraryA
HeapDestroy
ExitProcess
CloseHandle
InitializeCriticalSection
GetModuleFileNameA
HeapReAlloc
HeapAlloc
HeapFree
GetCurrentThreadId
GetTickCount
user32
MessageBoxA
Sections
.code Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 18B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ