Static task
static1
Behavioral task
behavioral1
Sample
b85bc3cf730174ebc7032a34ab3c9d3446725fe6604c54a0bfda3293c6309eb2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b85bc3cf730174ebc7032a34ab3c9d3446725fe6604c54a0bfda3293c6309eb2.exe
Resource
win10v2004-20220812-en
General
-
Target
b85bc3cf730174ebc7032a34ab3c9d3446725fe6604c54a0bfda3293c6309eb2
-
Size
310KB
-
MD5
6389e5ffa585c8e694b02747d8c94c70
-
SHA1
aaabb0149a7ddbb7a0c64991fab6b6f1274ddde6
-
SHA256
b85bc3cf730174ebc7032a34ab3c9d3446725fe6604c54a0bfda3293c6309eb2
-
SHA512
b4a58d3d3b8a7b8c9fe7945374cfda70647979a8943abc05f5f4495bae644a20b4fb079a3615961515a618b606e2302a4f577729eeea1ee2cf33a7f962acbfca
-
SSDEEP
6144:zgmYsNhjsR1U8BtMR1/9jVTJjAyvz2lvDGkAnuhybTMhl42dpetJVVm4A0hqy9sq:z9FNh4r7tMX/XJNS6bnuhybTU7QxAIF9
Malware Config
Signatures
Files
-
b85bc3cf730174ebc7032a34ab3c9d3446725fe6604c54a0bfda3293c6309eb2.exe windows x86
11d49ede43ff09a9c1b4c52b2ac1daf6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetCommBreak
SetLastError
LocalFlags
DeviceIoControl
CreateDirectoryW
GetFileAttributesW
GetStringTypeA
CloseHandle
RemoveDirectoryW
CreateEventA
FindClose
GlobalLock
GetVersionExA
GetPrivateProfileIntA
GetCurrentProcess
HeapFree
GetFileAttributesW
GetModuleHandleA
GetPrivateProfileSectionA
VirtualProtectEx
GetCurrentThread
user32
IsZoomed
IsWindow
SetCursorPos
SetFocus
PostMessageW
GrayStringW
wsprintfW
LoadCursorW
PeekMessageW
GetWindowLongW
IsDialogMessageA
DispatchMessageA
GetWindowTextW
netshell
HrCreateDesktopIcon
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
rasapi32
DwCloneEntry
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ