Static task
static1
Behavioral task
behavioral1
Sample
22fe81369f9d620a31371a1e9af8f603a2cf9bc7890ce1411bba9f00274a2561.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
22fe81369f9d620a31371a1e9af8f603a2cf9bc7890ce1411bba9f00274a2561.exe
Resource
win10v2004-20221111-en
General
-
Target
22fe81369f9d620a31371a1e9af8f603a2cf9bc7890ce1411bba9f00274a2561
-
Size
24KB
-
MD5
2250b83c01b07359c9e18d0a665b3db1
-
SHA1
da06669de9fa7e9ee31cefb777302840c0bd4dd6
-
SHA256
22fe81369f9d620a31371a1e9af8f603a2cf9bc7890ce1411bba9f00274a2561
-
SHA512
a0e5b70d882431f786817bc19854ec2f47b55a9ee7b416550d2701c70d52ce58b726d483d765afb79f2a87a569660ab66559908c23ade9a3f4a45a632b0f36d4
-
SSDEEP
768:5j1byx93CbNHJ3PlDlgAodJSqFVbXDNHtnZPu:fynybT3PUXdJSqLDNNnZW
Malware Config
Signatures
Files
-
22fe81369f9d620a31371a1e9af8f603a2cf9bc7890ce1411bba9f00274a2561.exe windows x86
5523ea611cfc028ce08668421c2bbfcd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
avifil32
AVIFileInfo
ole32
CoTaskMemFree
CoTaskMemAlloc
user32
GetDesktopWindow
GetDC
IsRectEmpty
ReleaseDC
advapi32
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegSetValueA
RegOpenKeyExA
RegCloseKey
RegOpenKeyA
RegCreateKeyExA
gdi32
GetSystemPaletteEntries
kernel32
LeaveCriticalSection
IsProcessorFeaturePresent
GetTickCount
TerminateProcess
Sleep
SetUnhandledExceptionFilter
GetLocalTime
GetCurrentProcess
GetDiskFreeSpaceA
EnterCriticalSection
QueryPerformanceCounter
GlobalMemoryStatus
VirtualAlloc
LoadLibraryA
HeapAlloc
UnhandledExceptionFilter
GetCurrentThreadId
DeviceIoControl
lstrlenW
lstrlenA
GetEnvironmentStringsW
GetModuleFileNameA
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
InterlockedIncrement
InterlockedDecrement
GetProcessHeap
GetModuleHandleW
GetSystemInfo
FreeEnvironmentStringsA
HeapFree
GetEnvironmentStrings
InterlockedCompareExchange
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
InterlockedExchange
GetCurrentProcessId
GetProcAddress
msdmo
MoInitMediaType
DMOUnregister
MoFreeMediaType
MoCopyMediaType
DMORegister
msvcrt
_chdir
_adjust_fdiv
_purecall
_except_handler3
_initterm
exit
malloc
_beep
_beginthread
shlwapi
SHDeleteKeyA
Sections
.textbss Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ