Static task
static1
Behavioral task
behavioral1
Sample
44329e98394c7635a609920c889966898e2e46167042ce679a9317b8c7f12331.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
44329e98394c7635a609920c889966898e2e46167042ce679a9317b8c7f12331.exe
Resource
win10v2004-20220812-en
General
-
Target
44329e98394c7635a609920c889966898e2e46167042ce679a9317b8c7f12331
-
Size
297KB
-
MD5
81b9de0b31b1f0c4ef39972037efcf86
-
SHA1
3f4f656dae882fb7daa1b1f7a9b29776143a8b8e
-
SHA256
44329e98394c7635a609920c889966898e2e46167042ce679a9317b8c7f12331
-
SHA512
61051ad2b6fcd984932c4e2c37eb5cfa8e949d792f132d96b58e4cb844af2c892082e3549c8261cabd2de15f3fa7687becbd860949b7aa2bf093f3dc67e07016
-
SSDEEP
6144:IkYzjZdYc63nBwTFMFQp2Sf9n4YU2ptFJPbRo4GMi5DsC:IFTYc63BQqQU64EtFJPbsBX
Malware Config
Signatures
Files
-
44329e98394c7635a609920c889966898e2e46167042ce679a9317b8c7f12331.exe windows x86
a285912fb2f017f14c28fda7c127a247
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
GetProcessHeap
lstrcmpiA
lstrcmpiA
EndUpdateResourceW
CreateWaitableTimerW
GetLogicalDrives
FileTimeToLocalFileTime
GetBinaryTypeW
lstrcmpiA
HeapCreate
CreateNamedPipeA
Sleep
GetDriveTypeA
SuspendThread
IsValidCodePage
lstrcmpiA
SetLastError
GetModuleFileNameA
lstrlenA
GetExitCodeProcess
GetModuleHandleA
lstrcmpiA
printui
PnPInterface
bFolderRefresh
ConstructPrinterFriendlyName
bPrinterSetup
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 288KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xml Size: 1024B - Virtual size: 650B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE