Static task
static1
Behavioral task
behavioral1
Sample
2219c6ee38fa7bde11cc06d7f13e7426b4cc1f4a0792d736274b5740dde7e6e7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2219c6ee38fa7bde11cc06d7f13e7426b4cc1f4a0792d736274b5740dde7e6e7.exe
Resource
win10v2004-20220812-en
General
-
Target
2219c6ee38fa7bde11cc06d7f13e7426b4cc1f4a0792d736274b5740dde7e6e7
-
Size
737KB
-
MD5
821baa38aa63ef18c9827cf5efe40700
-
SHA1
b25be4278f3bc47d6ae97a7538bb372451f0f9c9
-
SHA256
2219c6ee38fa7bde11cc06d7f13e7426b4cc1f4a0792d736274b5740dde7e6e7
-
SHA512
388ccf8b44acc3fc7431fb1691d531d0e38e3ddf0156e5db66c221aedc361d82c390b287aa8e2b4434185752c1c2907fec3d4ae5cbfec30976570e9f03b89211
-
SSDEEP
12288:ALDhJ1Cgf2s4h308lruBAc4Vo/O9SSfphdNpjNbOS37y+BrpS22suIHMTKlo7JTV:c/tJAkuYNWo/OcCNJnL5r12suQMTioN
Malware Config
Signatures
Files
-
2219c6ee38fa7bde11cc06d7f13e7426b4cc1f4a0792d736274b5740dde7e6e7.exe windows x86
2e5f10fb048c4799cc54091b7e1975e5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLongPathNameW
lstrcpynA
GetMailslotInfo
IsDebuggerPresent
_hread
CreateHardLinkA
WritePrivateProfileSectionA
SetCalendarInfoA
CreateSemaphoreA
IsBadStringPtrA
GetSystemTimeAsFileTime
GetPrivateProfileSectionNamesA
CommConfigDialogW
GetComputerNameExA
ReadFileScatter
FindVolumeClose
SetFilePointerEx
FindNextVolumeA
CreateMailslotW
SizeofResource
OpenSemaphoreA
TlsAlloc
GetCommState
GetCurrentProcess
GlobalUnfix
lstrcmpA
ExpandEnvironmentStringsW
SetProcessWorkingSetSize
SetDefaultCommConfigA
MoveFileA
GetPrivateProfileSectionNamesW
FindFirstVolumeMountPointW
LocalLock
GetLocalTime
DefineDosDeviceA
lstrcpyA
GetComputerNameExW
GetProcessTimes
FindNextVolumeMountPointW
GlobalUnlock
CompareFileTime
GetExitCodeThread
LockFileEx
SetVolumeMountPointW
FlushFileBuffers
GetCPInfo
GetHandleInformation
CreateEventA
CreateJobObjectA
ReleaseSemaphore
GetUserDefaultUILanguage
InitAtomTable
OpenFileMappingA
TlsGetValue
GetProcessAffinityMask
GetDefaultCommConfigW
GetFileType
IsProcessorFeaturePresent
CreateMailslotA
SetSystemTimeAdjustment
GetProfileIntW
MoveFileExA
EnumResourceLanguagesA
GetProcessPriorityBoost
GetLogicalDrives
SetLocaleInfoW
GetSystemDefaultLCID
FindResourceExA
SetEnvironmentVariableA
FindNextChangeNotification
QueueUserAPC
CreateFileA
GlobalFree
GlobalSize
WaitNamedPipeW
GetThreadLocale
GetSystemTimeAdjustment
SetThreadLocale
GetProfileStringW
lstrcpyW
GetCommandLineW
RtlUnwind
ExitProcess
IsBadCodePtr
CreateMutexW
GetUserDefaultLCID
RemoveDirectoryA
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCompressedFileSizeW
GetDevicePowerState
OpenFileMappingW
GetLastError
GetEnvironmentVariableA
GetComputerNameA
FlushViewOfFile
SetStdHandle
shlwapi
PathAppendA
PathCombineA
comctl32
InitCommonControlsEx
user32
GetKeyState
LoadCursorW
GetParent
DrawTextW
SetDlgItemTextW
PtInRect
MoveWindow
PostMessageW
DialogBoxParamW
EndDialog
SetTimer
LoadBitmapW
DrawMenuBar
DispatchMessageW
CheckRadioButton
GetDesktopWindow
LoadStringA
GetWindowPlacement
FrameRect
EnableMenuItem
DefWindowProcW
InvertRect
EndPaint
SetRect
RegisterClassW
LoadStringW
DestroyWindow
InvalidateRect
CreateWindowExW
LoadIconW
GetMessageW
PostQuitMessage
GetSubMenu
FillRect
TranslateAcceleratorW
BeginPaint
GetDlgItemTextW
WaitMessage
MessageBoxA
GetClientRect
ReleaseDC
GetDlgItem
WinHelpW
OffsetRect
SendMessageW
GetWindowRect
GetMenu
UnionRect
IsZoomed
IsDlgButtonChecked
LoadAcceleratorsW
ShowWindow
TranslateMessage
CheckDlgButton
SetCapture
GetForegroundWindow
GetSystemMetrics
IsIconic
UpdateWindow
IntersectRect
MessageBoxW
ReleaseCapture
wsprintfW
GetDC
PeekMessageW
advapi32
RegQueryValueExA
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExA
RegQueryValueExW
Sections
.text Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 244KB - Virtual size: 596KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 182KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ