Static task
static1
Behavioral task
behavioral1
Sample
85ed9b317481d2285ac1c7de3cf2ef9fd2a239b14aa6d604a137c8e7f07434db.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
85ed9b317481d2285ac1c7de3cf2ef9fd2a239b14aa6d604a137c8e7f07434db.exe
Resource
win10v2004-20220812-en
General
-
Target
85ed9b317481d2285ac1c7de3cf2ef9fd2a239b14aa6d604a137c8e7f07434db
-
Size
64KB
-
MD5
92dafd8f7186e4a03b9bd7f3929aeb00
-
SHA1
78019cc98967e22415e9a4905a54658ca6f68c6c
-
SHA256
85ed9b317481d2285ac1c7de3cf2ef9fd2a239b14aa6d604a137c8e7f07434db
-
SHA512
41549cf6c20200ab0b538d6acf2ece8165159f7045d4a47b4481d762b76d15e40b7bd7c5333af5fb7f528ebda4d9959d267bd7536aa74b04d5bc1b447bd32123
-
SSDEEP
1536:vmihdHxWoip1rIFy2llyNg0CAu6bbbLv3C3DX:vminxWoip1raX2Ng0CAu6Xvi
Malware Config
Signatures
Files
-
85ed9b317481d2285ac1c7de3cf2ef9fd2a239b14aa6d604a137c8e7f07434db.exe windows x86
d84317b889123a86e8a07bb7a0aed97a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
CreateMailslotA
CopyFileA
FindClose
HeapCreate
CreateEventA
CreateFileA
VirtualFree
GetFullPathNameW
CreatePipe
GetModuleHandleA
GetShortPathNameA
SetEnvironmentVariableA
GetCurrentDirectoryW
GetModuleHandleW
GetFullPathNameW
FindClose
SetVolumeLabelA
CreateSemaphoreA
WriteConsoleA
Sleep
GetStringTypeA
CreateFileMappingA
mshtml
DllCanUnloadNow
PrintHTML
DllGetClassObject
ShowModalDialog
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avdr Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ