Static task
static1
Behavioral task
behavioral1
Sample
522d7b012a00b49494c1a8f54ef27b28c903bb0df21e9d84e40086d4714b2f65.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
522d7b012a00b49494c1a8f54ef27b28c903bb0df21e9d84e40086d4714b2f65.exe
Resource
win10v2004-20220901-en
General
-
Target
522d7b012a00b49494c1a8f54ef27b28c903bb0df21e9d84e40086d4714b2f65
-
Size
122KB
-
MD5
562128a20a03e1d153109e61d1dc4d91
-
SHA1
823e2bba1f642fa6f1d3b5837e24d9be3263ebe0
-
SHA256
522d7b012a00b49494c1a8f54ef27b28c903bb0df21e9d84e40086d4714b2f65
-
SHA512
6e777a7865b9f0eb64fad2b85968fb28fa3016b635ae8dab479ff5a503165cf189159834af9c6eb5a6725e11886c859d04230bd483084ec3b8cde748fdcead2d
-
SSDEEP
3072:EMg5nMNj45DF35X/xhAUu7dvfOsvek/NrUcR:i5Ml4XtfRu7dneaFU
Malware Config
Signatures
Files
-
522d7b012a00b49494c1a8f54ef27b28c903bb0df21e9d84e40086d4714b2f65.exe windows x86
9bc25eb7330dde4fa20a6dd45a690eb1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateSemaphoreA
CloseHandle
OpenMutexW
CloseHandle
GetModuleHandleA
GetModuleHandleW
GetCurrentDirectoryA
GetEnvironmentVariableW
GetFullPathNameA
GetFullPathNameA
ReadConsoleA
HeapCreate
GetStringTypeA
FindNextVolumeA
GetConsoleMode
CloseHandle
GetDiskFreeSpaceW
GetVolumePathNameA
ReleaseSemaphore
FindFirstVolumeA
lstrcmpW
WaitForMultipleObjects
GetFileAttributesW
certmgr
DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
DllRegisterServer
Sections
.text Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.res Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE