Static task
static1
Behavioral task
behavioral1
Sample
22eb73f26d359c28fcbe2b328ff01ceb3eb3b0622e36b5b4e4c71229d307f8de.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
22eb73f26d359c28fcbe2b328ff01ceb3eb3b0622e36b5b4e4c71229d307f8de.exe
Resource
win10v2004-20221111-en
General
-
Target
22eb73f26d359c28fcbe2b328ff01ceb3eb3b0622e36b5b4e4c71229d307f8de
-
Size
24KB
-
MD5
82b9ff1458efe2007c6561b85b52386e
-
SHA1
05402d1c6d5d480491f326044d48da8e289fe285
-
SHA256
22eb73f26d359c28fcbe2b328ff01ceb3eb3b0622e36b5b4e4c71229d307f8de
-
SHA512
3ecba9bf1cfc9508007e7b9da992bb47df6c46e9da4eac74e0ae416b60038f2e73a6504d6ca5aa52043eaf2536f63116fb3b9ee552f9f18547d19f71cd12d4ee
-
SSDEEP
384:bwHzBPcuvt/IHBnUmUFOc/JcX0zA3PruIIPqWe4et8pOX:ePZVIHBnUmUFOc/JcX0E3TuIie4etXX
Malware Config
Signatures
Files
-
22eb73f26d359c28fcbe2b328ff01ceb3eb3b0622e36b5b4e4c71229d307f8de.exe windows x86
396f17e9a4ac22e849072b0ce5aa56df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
CloseHandle
ReadFile
CreateFileA
GetProcAddress
GetModuleHandleA
GlobalFree
ReadProcessMemory
GlobalAlloc
OpenProcess
SetThreadContext
SuspendThread
Sleep
ResumeThread
WriteProcessMemory
VirtualProtectEx
GetThreadContext
ExitProcess
GetExitCodeThread
WaitForSingleObject
CreateRemoteThread
GetVersion
LoadLibraryA
FindFirstFileA
TerminateProcess
CreateProcessA
SetCurrentDirectoryA
DeleteFileA
GetModuleFileNameA
GetStartupInfoA
user32
MessageBoxA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
msvcr71
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
_onexit
__dllonexit
sprintf
_getcwd
strcat
fclose
fopen
fgets
fprintf
strcmp
strstr
strlen
memset
strcpy
??3@YAXPAX@Z
_stricmp
exit
_strcmpi
Sections
.data Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ