Static task
static1
Behavioral task
behavioral1
Sample
85e262c2d3c8c6a5e8d59656c7b596a7e6cfb42ae0c8d0a91faff4c0d345b468.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
85e262c2d3c8c6a5e8d59656c7b596a7e6cfb42ae0c8d0a91faff4c0d345b468.exe
Resource
win10v2004-20220812-en
General
-
Target
85e262c2d3c8c6a5e8d59656c7b596a7e6cfb42ae0c8d0a91faff4c0d345b468
-
Size
798KB
-
MD5
0a651a4b32e849340323999c051774f1
-
SHA1
ab9197de9b1e3e0cceacb670510b0c74991bd47c
-
SHA256
85e262c2d3c8c6a5e8d59656c7b596a7e6cfb42ae0c8d0a91faff4c0d345b468
-
SHA512
5a5355f89c4bb000c05677d9fe70de6fbf1515fb01e202619fceca553d3530cebf1d50d32d4cb98caf7fdafa552f52be2572c3d89aafc5483f9583758766c899
-
SSDEEP
12288:226cNGXOQIr3cJNnyAjcvo6DBg12r3z+aE35dLJlhbZ+elXajys:JNGXOQQ34Nhjcvo6d8qz+FnfaL
Malware Config
Signatures
Files
-
85e262c2d3c8c6a5e8d59656c7b596a7e6cfb42ae0c8d0a91faff4c0d345b468.exe windows x86
c4e592e39747f1f2541e77be6cd6fc50
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLocaleInfoA
GetVersionExA
CreateFileW
GetModuleFileNameA
GetFileAttributesW
CreateMutexA
VirtualProtect
InterlockedExchange
LocalFlags
CreateDirectoryA
HeapDestroy
IsValidLocale
GetStdHandle
ResumeThread
lstrlenA
AddAtomW
GetTickCount
LeaveCriticalSection
CreateFileW
SuspendThread
OpenEventW
GetCurrentThreadId
SetEvent
GetModuleHandleA
SetFilePointer
user32
GetWindowLongA
DispatchMessageA
wsprintfA
SetRect
GetWindowTextA
IsMenu
MessageBoxA
PeekMessageA
GetWindowLongA
LoadCursorA
DestroyMenu
DestroyIcon
IsMenu
dplayx
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
advapi32
IsValidAcl
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 756KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 793KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE