Static task
static1
Behavioral task
behavioral1
Sample
85be7da75f30f373acff44cf04f0405cbbff01585c44f16801bd12c4b3a076f9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
85be7da75f30f373acff44cf04f0405cbbff01585c44f16801bd12c4b3a076f9.exe
Resource
win10v2004-20220812-en
General
-
Target
85be7da75f30f373acff44cf04f0405cbbff01585c44f16801bd12c4b3a076f9
-
Size
3.8MB
-
MD5
337ae910525f232eebbc809089c813ba
-
SHA1
91240f8e3a63b5ca4ce74c8a5ae9343545c48c4d
-
SHA256
85be7da75f30f373acff44cf04f0405cbbff01585c44f16801bd12c4b3a076f9
-
SHA512
06b2ed034b9e8f0c4970fabca1bf2599b3f0e803ef2b61e29796649141bbc8ae3f296c0b3dd1c48b0747d61a482ea936a0c90140988a4edf6ee11ff58f0773cf
-
SSDEEP
98304:I6745krbYCte1BW+MTbk++V6v70zejG6fCxr22sr5WYC1/qNiPcqZ/uFvYaDglkE:YkrlXtyVLYe1tV
Malware Config
Signatures
Files
-
85be7da75f30f373acff44cf04f0405cbbff01585c44f16801bd12c4b3a076f9.exe windows x86
7e8644ca25af6753e821b0e7323e41fb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
GetFileAttributesA
CreateFileA
LocalFileTimeToFileTime
WideCharToMultiByte
MultiByteToWideChar
ResumeThread
WaitForSingleObjectEx
AddVectoredExceptionHandler
HeapAlloc
CreateMutexA
LeaveCriticalSection
ReadFile
GetTempPathA
GetCurrentProcessId
DisableThreadLibraryCalls
GetModuleHandleExW
Sleep
GetLastError
GetTickCount
InterlockedCompareExchange
ExitProcess
SetLastError
GetModuleHandleA
GetVersionExA
VirtualAlloc
VirtualFree
LoadLibraryA
GetProcAddress
RemoveDirectoryA
GetCurrentThread
WaitForSingleObject
FileTimeToLocalFileTime
GetCurrentProcess
GetLocalTime
HeapFree
GetProcessId
GetProcessHeap
WriteConsoleW
CreateFileW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
HeapReAlloc
LoadLibraryExW
GetModuleHandleW
TlsFree
TlsSetValue
SetEndOfFile
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
GetStringTypeW
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
DeleteCriticalSection
GetStartupInfoW
advapi32
RegCreateKeyExA
RegQueryValueExW
RegQueryValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
RegOpenKeyA
RegEnumValueW
RegEnumKeyA
user32
LoadIconW
DispatchMessageW
MsgWaitForMultipleObjects
DispatchMessageA
GetWindowTextA
PeekMessageW
GetWindowRect
SendMessageA
CreateWindowExA
PostQuitMessage
FindWindowW
RegisterClassExW
EnumWindows
LoadIconA
GetMessageW
TrackPopupMenu
FindWindowA
DestroyWindow
RegisterClassExA
SetForegroundWindow
UpdateWindow
GetCursorPos
SetWindowPos
SendMessageW
GetWindowTextW
GetMessageA
RedrawWindow
BringWindowToTop
CreatePopupMenu
DefWindowProcA
TranslateMessage
RegisterWindowMessageW
PeekMessageA
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ