Static task
static1
Behavioral task
behavioral1
Sample
22a18e88ac389d642af388bf19e2255b351181158578037d1700eeab92d08c42.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
22a18e88ac389d642af388bf19e2255b351181158578037d1700eeab92d08c42.exe
Resource
win10v2004-20221111-en
General
-
Target
22a18e88ac389d642af388bf19e2255b351181158578037d1700eeab92d08c42
-
Size
432KB
-
MD5
abdf81c744a8c2a0278266dfa09d9785
-
SHA1
a36dcf289a3ff88425895323cf026bb86d125f99
-
SHA256
22a18e88ac389d642af388bf19e2255b351181158578037d1700eeab92d08c42
-
SHA512
01a3e14645703fb68c8a5a4192011e2f1d9ccb056f0c8282b96f675e2736b31000f01eec774064f4a076fb50dde0b7d14fdb0355115d58ca6980a4b9eff9567d
-
SSDEEP
12288:LeEDVZPRWxwMIsQ+97Sg5mXEp0QcmrQq7s98lbE:bcuMIsQ+955rQ8s9
Malware Config
Signatures
Files
-
22a18e88ac389d642af388bf19e2255b351181158578037d1700eeab92d08c42.exe windows x86
d79a8d403e69750775d4884b55ec2eb1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
ResetEvent
ExitThread
GetTickCount
CreateFileA
GetDriveTypeA
GetCommandLineW
CloseHandle
lstrcpynA
LoadLibraryA
GetFileAttributesA
LocalFree
FindAtomA
ReleaseMutex
GetComputerNameW
GetLocalTime
GetTickCount
LoadLibraryW
GetDiskFreeSpaceW
HeapCreate
user32
SetFocus
GetComboBoxInfo
GetClipCursor
DestroyCaret
CallWindowProcA
GetKeyState
GetDlgItem
FillRect
DrawStateA
CloseWindow
DispatchMessageA
GetClassInfoA
CreateWindowExA
snmpapi
SnmpTfxClose
SnmpUtilMemAlloc
SnmpUtilMemFree
SnmpTfxOpen
SnmpTfxQuery
appwiz.cpl
ConfigStartMenu
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 420KB - Virtual size: 419KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ