Static task
static1
Behavioral task
behavioral1
Sample
c775f1f70781434b044014dfba766a63589d3d68928a8203af83b09cb3cf13c2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c775f1f70781434b044014dfba766a63589d3d68928a8203af83b09cb3cf13c2.exe
Resource
win10v2004-20220812-en
General
-
Target
c775f1f70781434b044014dfba766a63589d3d68928a8203af83b09cb3cf13c2
-
Size
168KB
-
MD5
44622eee5dea53683f554e8e1bf8a2c8
-
SHA1
6b12a04d3271e5997baee3657d6b24ca7e4aa307
-
SHA256
c775f1f70781434b044014dfba766a63589d3d68928a8203af83b09cb3cf13c2
-
SHA512
2145797c2b37caaee009ec490716ff6a2ebf952d2457ce93898cc8f3fc24157644fbf2acce56a278ed6ff3e4912821a139aeab713459bbb237d0c391d7b25879
-
SSDEEP
3072:U/soDxp+ufLgfFMRVhPvt4XwrN7RPVHGFN0q8HCE0oLjl8sB:twCdfFg3V4XwRRPBGHEhXB
Malware Config
Signatures
Files
-
c775f1f70781434b044014dfba766a63589d3d68928a8203af83b09cb3cf13c2.exe windows x86
e304217fc16c011615a0ec22783cbfae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
SearchPathA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 4KB - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 48KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE