Static task
static1
Behavioral task
behavioral1
Sample
85018e5c238a7e9acdbf9d04617dc1863a8429ea169e39e5abbb6fc387be1baf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
85018e5c238a7e9acdbf9d04617dc1863a8429ea169e39e5abbb6fc387be1baf.exe
Resource
win10v2004-20220901-en
General
-
Target
85018e5c238a7e9acdbf9d04617dc1863a8429ea169e39e5abbb6fc387be1baf
-
Size
73KB
-
MD5
373c9e5461c2b234f70e4d6102198eff
-
SHA1
a59e72936cbd4de1cbb8fce53de4c72d1fd9a1b8
-
SHA256
85018e5c238a7e9acdbf9d04617dc1863a8429ea169e39e5abbb6fc387be1baf
-
SHA512
70b20a884bbea32d87c4c5958b33f1cbfea077da69d86ba9a324919521dd4fada58c14263b7e3c452e27d06572765a8525ba06528a5936d47ed3fea9bd9bb861
-
SSDEEP
1536:p3YNL53kCxWOKNWuTsluI0hq4q8CQgYGp51KUn:p3YNd3kYWO2Whsqt4QJn
Malware Config
Signatures
Files
-
85018e5c238a7e9acdbf9d04617dc1863a8429ea169e39e5abbb6fc387be1baf.exe windows x86
8b139d5fbade7094b6de2b0d2baedf21
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitThread
FindNextVolumeA
GetCurrentThreadId
GetLastError
GetModuleHandleW
GetProcessPriorityBoost
GetSystemWindowsDirectoryW
Sleep
Module32FirstW
SearchPathA
VerifyVersionInfoA
msvcrt
isdigit
malloc
abs
user32
MessageBoxA
ShowOwnedPopups
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9 Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 55B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ