Static task
static1
Behavioral task
behavioral1
Sample
44c52b0f33968dc432324446552bc1320e8334fec0670b344a3af16c646e2e97.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
44c52b0f33968dc432324446552bc1320e8334fec0670b344a3af16c646e2e97.exe
Resource
win10v2004-20220812-en
General
-
Target
44c52b0f33968dc432324446552bc1320e8334fec0670b344a3af16c646e2e97
-
Size
172KB
-
MD5
0e545a4d74388f1a02d5ebff8ec6d9c6
-
SHA1
23d7025008363112f5c293b4ea46dbdb7f8e9957
-
SHA256
44c52b0f33968dc432324446552bc1320e8334fec0670b344a3af16c646e2e97
-
SHA512
372fe92ce65f0312a72b35385f0d5f8ce6717ba65cdc55a4ea4ef4316d3d213076cac18a9b81c7567898f704b2882ad7fdc277804dd8206cadafd90772831483
-
SSDEEP
3072:xgR25wKnc+57B8Wx8L6cbg56Uv124OPGE3wDILXxJzJGtj3gQAa1z:+Rew4Vx8v46LPJ3wDI3zMtr0a
Malware Config
Signatures
Files
-
44c52b0f33968dc432324446552bc1320e8334fec0670b344a3af16c646e2e97.exe windows x86
d3f30fc43b31ce5898f9f0e95665b9b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
shlwapi
StrRetToBSTR
PathRemoveFileSpecW
PathAppendW
PathCombineW
SHGetValueW
PathFileExistsW
oleacc
CreateStdAccessibleObject
kernel32
GlobalFindAtomA
GetFileType
GetTickCount
CreateDirectoryW
GetSystemInfo
LoadLibraryExW
SetUnhandledExceptionFilter
LoadLibraryA
Sleep
GetStartupInfoA
SetCurrentDirectoryW
QueryPerformanceCounter
InterlockedExchange
GetCurrentProcessId
EnumResourceLanguagesW
HeapFree
RtlUnwind
WideCharToMultiByte
InterlockedDecrement
GetCurrentThreadId
GetVersionExW
LocalAlloc
GetPrivateProfileStructW
FindClose
InterlockedIncrement
GetCurrentDirectoryW
GetProcessHeap
GetProcAddress
InterlockedCompareExchange
FreeLibrary
HeapAlloc
Sections
.text Size: 89KB - Virtual size: 485KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ