Static task
static1
Behavioral task
behavioral1
Sample
44a2940b7f241645e2519e4e7c939f2cb05f1cacdb1ab2944fe3ed19d6863dea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
44a2940b7f241645e2519e4e7c939f2cb05f1cacdb1ab2944fe3ed19d6863dea.exe
Resource
win10v2004-20220812-en
General
-
Target
44a2940b7f241645e2519e4e7c939f2cb05f1cacdb1ab2944fe3ed19d6863dea
-
Size
816KB
-
MD5
274ce5abcd87948731756926e88fde6a
-
SHA1
ca094d3e3f24c541ee1e1e6e687f5b25612c4b40
-
SHA256
44a2940b7f241645e2519e4e7c939f2cb05f1cacdb1ab2944fe3ed19d6863dea
-
SHA512
44eae27a9a91440b9e9d5f42e9807aad398e49947e9b603ff6048bb20f07659c0d4b33b09239decea93e984637411dd2b8a36b94c0d4b1bf9c7a6eb1367d3449
-
SSDEEP
24576:bq/ahiaZA1ud2DkWPKfvlIBm+nqTyFpT0t:7iayn7PKfvlB+Bj
Malware Config
Signatures
Files
-
44a2940b7f241645e2519e4e7c939f2cb05f1cacdb1ab2944fe3ed19d6863dea.exe windows x86
6eab75aeffc15e07cbc88b8f7c39ad55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReadFile
GetCurrentDirectoryA
FormatMessageW
GetFileSize
lstrlenA
DeleteFileW
lstrlenA
SetThreadPriority
lstrlenA
WriteConsoleW
lstrlenA
lstrlenA
lstrcmpA
GetModuleHandleA
VirtualFree
CreateDirectoryW
GetPrivateProfileIntA
GetCurrentThreadId
lstrlenA
GetDiskFreeSpaceW
GetCommandLineA
lstrlenA
lstrlenA
lstrcatA
VirtualProtect
lstrlenA
lstrlenA
OpenMutexA
TlsGetValue
certcli
CAEnumFirstCA
CAEnumNextCA
CADeleteCertType
CADeleteCA
Sections
.text Size: 17KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE