Static task
static1
Behavioral task
behavioral1
Sample
22876ac33736338fa1ce26c472533370ae96314079f2b337a98de081a18d3fc0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
22876ac33736338fa1ce26c472533370ae96314079f2b337a98de081a18d3fc0.exe
Resource
win10v2004-20221111-en
General
-
Target
22876ac33736338fa1ce26c472533370ae96314079f2b337a98de081a18d3fc0
-
Size
110KB
-
MD5
a44a2e1d75935aff52bf0112ee3a3313
-
SHA1
778c1f75777e33be59edc9a9ce55756811abd780
-
SHA256
22876ac33736338fa1ce26c472533370ae96314079f2b337a98de081a18d3fc0
-
SHA512
e929edda2e0d1ece06620135824fcd384ae626e4c83f8ba64376969ab8823b9c7fba4266a410a4dc99c80784a1cffa99c9b8d979abaca14987772a7ad4762be7
-
SSDEEP
1536:vXj2MBb4v1sAEIP/1jw1lOdohFDS0CPOOPllzUlnxWDNqLPfMp5c:vXjDCvehI+BhFDSKSUiZqLPfM4
Malware Config
Signatures
Files
-
22876ac33736338fa1ce26c472533370ae96314079f2b337a98de081a18d3fc0.exe windows x86
2650a2b8e0a8345d2d7ebc4e9beaaf33
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
Sleep
MultiByteToWideChar
InterlockedExchange
LoadLibraryW
RtlUnwind
SetStdHandle
WriteConsoleW
LCMapStringW
GetStringTypeW
HeapAlloc
HeapReAlloc
IsProcessorFeaturePresent
HeapSize
CreateFileW
FlushFileBuffers
MapViewOfFile
UnmapViewOfFile
GlobalAlloc
RaiseException
GlobalFree
OpenFileMappingA
GlobalReAlloc
lstrlenA
lstrcpynA
lstrcatA
lstrlenW
WaitForSingleObject
WriteFile
CreateFileA
GetModuleFileNameW
ReadFile
Thread32First
Thread32Next
VirtualProtect
CreateToolhelp32Snapshot
GetThreadContext
SetThreadContext
InterlockedCompareExchange
FlushInstructionCache
OpenThread
SuspendThread
ResumeThread
VirtualFree
VirtualAlloc
VirtualQuery
ExitProcess
GetModuleHandleW
EncodePointer
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetFileSize
GetStdHandle
GetTimeZoneInformation
CompareStringW
CreateThread
CloseHandle
OpenProcess
lstrcmpiA
GetTickCount64
GetTickCount
LoadLibraryA
GetProcAddress
SetEvent
FreeLibrary
SetEnvironmentVariableA
user32
SendDlgItemMessageA
GetMessageW
TranslateAcceleratorW
SetWindowLongW
SendMessageTimeoutW
CreateDialogParamW
IsWindow
GetWindowThreadProcessId
DispatchMessageW
GetClassNameA
PostMessageW
SendMessageA
EnumWindows
TranslateMessage
LoadAcceleratorsW
KillTimer
PostQuitMessage
SetTimer
DestroyWindow
SendMessageTimeoutA
FindWindowExA
MessageBoxA
shell32
ShellExecuteExA
Sections
.text Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ