Static task
static1
Behavioral task
behavioral1
Sample
84e466c8f863a91fa691f68a55a7c63f9b2c6a2463297ad2f276563a839bc3bb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
84e466c8f863a91fa691f68a55a7c63f9b2c6a2463297ad2f276563a839bc3bb.exe
Resource
win10v2004-20220901-en
General
-
Target
84e466c8f863a91fa691f68a55a7c63f9b2c6a2463297ad2f276563a839bc3bb
-
Size
312KB
-
MD5
0c0e40500571d939e59a56c08c2fc7b1
-
SHA1
dadca6402aba2204caec6c8343194b87e4e05b98
-
SHA256
84e466c8f863a91fa691f68a55a7c63f9b2c6a2463297ad2f276563a839bc3bb
-
SHA512
988ddd08f8c1cdaf01e6023db281a1899b7a6ba1d1a3f4cdeeca0fe881b84b7e47254c6469a230d8c4fea196f479c24a60fda91ed6369eaaaddd185e84c1292b
-
SSDEEP
1536:vvWqQCKwDjcAXUdXl5omX2nMRwEc397l5w8I:XWtCFjcuCXjX2QwEctrA
Malware Config
Signatures
Files
-
84e466c8f863a91fa691f68a55a7c63f9b2c6a2463297ad2f276563a839bc3bb.exe windows x86
d24e05b55d28271250b4d6ed0be0306a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
GetFileAttributesExA
lstrcmpiW
DisconnectNamedPipe
GetSystemTimeAdjustment
GlobalUnfix
SetEndOfFile
CreateFileMappingA
ReadConsoleW
ExpandEnvironmentStringsW
GetLastError
DefineDosDeviceA
GetEnvironmentVariableW
GetLogicalDrives
GetDevicePowerState
GetStringTypeW
GlobalUnlock
FillConsoleOutputCharacterA
SetThreadContext
GetConsoleCursorInfo
DuplicateHandle
QueryDosDeviceA
EnumResourceNamesA
MoveFileW
Beep
HeapFree
EnumDateFormatsExA
GetLongPathNameA
LocalFree
GetOverlappedResult
SetLastError
ReadConsoleW
GetProcessWorkingSetSize
user32
SubtractRect
IsDlgButtonChecked
GetKBCodePage
LockWorkStation
WindowFromPoint
DdeConnectList
CharPrevExA
GrayStringA
IsCharAlphaW
InSendMessageEx
CreateDesktopA
SetCursorPos
CopyAcceleratorTableW
GetDlgItemTextW
SetWindowTextW
GetKeyState
IsCharLowerA
DlgDirListW
IsZoomed
InvalidateRect
Sections
.text Size: 141KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE