Static task
static1
Behavioral task
behavioral1
Sample
22b8328ed2f24c9b0ad7915e3541ae8de495bf5553b14500f87d51f59a9ccba7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
22b8328ed2f24c9b0ad7915e3541ae8de495bf5553b14500f87d51f59a9ccba7.exe
Resource
win10v2004-20220812-en
General
-
Target
22b8328ed2f24c9b0ad7915e3541ae8de495bf5553b14500f87d51f59a9ccba7
-
Size
118KB
-
MD5
936cb8b62f5799550eb02472a4a35c52
-
SHA1
922bfea3015b9aaf129bde0019b706eb6ea6b833
-
SHA256
22b8328ed2f24c9b0ad7915e3541ae8de495bf5553b14500f87d51f59a9ccba7
-
SHA512
497fbb88b33d88faeb3763aaf19e3c6fe57f343cdf58e1104161101230b80c610ba5897c7ebda2b402de8484cc098e2cf7ee0efe97ba5de70929b7a0be0fe070
-
SSDEEP
1536:9rmK2gkkX+fdxNwbNu/NHELXUFmD/LvqnHwS72ljRTd4AlVE9G:9r+hkOfNGuZELXl7DqnHwSC3Tbm
Malware Config
Signatures
Files
-
22b8328ed2f24c9b0ad7915e3541ae8de495bf5553b14500f87d51f59a9ccba7.exe windows x86
f76396769471863e0ff6b3b08fb19e2d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrStrIA
kernel32
ReadFile
lstrcpyA
CreateFileA
FindResourceA
OpenFile
SetFilePointer
lstrlenA
FreeLibrary
LoadResource
VirtualFree
WriteFile
SizeofResource
CreateProcessA
GetSystemDirectoryA
GetStartupInfoA
GetLastError
GetProcAddress
VirtualAlloc
GetTempFileNameA
LoadLibraryA
LockResource
GetModuleFileNameA
CreateMutexA
CloseHandle
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
snew Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE