Static task
static1
Behavioral task
behavioral1
Sample
c84ff37b441e2b1b16a27b6f9eaec7cfb3be6b910f9ed565f5c6f98d7cb3b935.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c84ff37b441e2b1b16a27b6f9eaec7cfb3be6b910f9ed565f5c6f98d7cb3b935.exe
Resource
win10v2004-20220812-en
General
-
Target
c84ff37b441e2b1b16a27b6f9eaec7cfb3be6b910f9ed565f5c6f98d7cb3b935
-
Size
838KB
-
MD5
5973fbb49eb811675d6f5eac2eb52a70
-
SHA1
d1ecf6b88bc030c2a28b4997ffa14ad46c55b18d
-
SHA256
c84ff37b441e2b1b16a27b6f9eaec7cfb3be6b910f9ed565f5c6f98d7cb3b935
-
SHA512
978056d3d0a7a910b6a8d83b60599bc1bca5da4890f7d4362832879cf3451bbed8b246ac22e0dd11d69c10484829561fd97ddf77ee08692c497227d9c2a7f252
-
SSDEEP
24576:tZEbi7WWP698RO4PrGEGVtjCJ9DnuHREZAFYbkIbLc:t2i7W6RO4PrGnt+3DuxEZAibkwI
Malware Config
Signatures
Files
-
c84ff37b441e2b1b16a27b6f9eaec7cfb3be6b910f9ed565f5c6f98d7cb3b935.exe windows x86
2c9ae4ddb488ae2aeb2f0941a499f555
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetVolumeInformationW
lstrcatW
HeapCreate
GetCurrentProcess
GetVolumePathNameA
WriteConsoleW
HeapFree
GetPrivateProfileIntW
lstrlenW
CreateMutexW
GetStringTypeA
GetShortPathNameW
OpenEventW
SetStdHandle
LoadLibraryA
GetDiskFreeSpaceW
CreateEventA
GetTickCount
SetEnvironmentVariableA
netshell
HrRenameConnection
HrCreateDesktopIcon
NcFreeNetconProperties
HrLaunchConnection
Sections
.code Size: 23KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pdata Size: 4KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.ndata Size: 803KB - Virtual size: 802KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 6KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE