Static task
static1
Behavioral task
behavioral1
Sample
44733404a323d6a7360ca45944913983b7ec9ff2b5856aa69997805863fca9a5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
44733404a323d6a7360ca45944913983b7ec9ff2b5856aa69997805863fca9a5.exe
Resource
win10v2004-20221111-en
General
-
Target
44733404a323d6a7360ca45944913983b7ec9ff2b5856aa69997805863fca9a5
-
Size
129KB
-
MD5
03d4573f820d5df33ca8390d1b0aa36c
-
SHA1
b807a07dd4b39cac58b3c874f523d74fbc011adb
-
SHA256
44733404a323d6a7360ca45944913983b7ec9ff2b5856aa69997805863fca9a5
-
SHA512
0c8e8206173ac55acefeb38608a5751ab1c1f6b42838579a446e9391ad3bdf7f1e7974083fa182435f7cc221f3429e07893575422b05887445e11ae48916f273
-
SSDEEP
3072:JPh23K/oifIdfwQ4EDADAgn20OiLV1YSm8:Jp23K/oTIBDA2/LV1
Malware Config
Signatures
Files
-
44733404a323d6a7360ca45944913983b7ec9ff2b5856aa69997805863fca9a5.exe windows x86
3298801e71c4f817bf3471e92166fb86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerInstallFileA
VerFindFileA
GetFileVersionInfoA
advapi32
RegQueryValueExA
RegEnumKeyExA
GetLengthSid
kernel32
GetLastError
WaitForSingleObject
ExitThread
VirtualAlloc
GetOEMCP
VirtualAllocEx
GetProcAddress
LoadLibraryA
GetStartupInfoA
GetStringTypeA
GetModuleHandleA
EnumCalendarInfoA
GetDiskFreeSpaceA
ExitProcess
LocalAlloc
GetVersionExA
GetCurrentThread
user32
PtInRect
RegisterWindowMessageA
DestroyIcon
FindWindowA
GetCursor
SetActiveWindow
IsChild
UnregisterClassA
SetWindowTextA
EnableMenuItem
DrawMenuBar
CreateMenu
GetWindowThreadProcessId
SetCapture
AdjustWindowRectEx
GetKeyboardLayout
RedrawWindow
IsWindowVisible
Sections
CODE Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ