Static task
static1
Behavioral task
behavioral1
Sample
84d24b6827f8f539fccab694c80966936317d576d26256ecd91524ea9dbae8c1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
84d24b6827f8f539fccab694c80966936317d576d26256ecd91524ea9dbae8c1.exe
Resource
win10v2004-20221111-en
General
-
Target
84d24b6827f8f539fccab694c80966936317d576d26256ecd91524ea9dbae8c1
-
Size
32KB
-
MD5
a9386125d00364ef5d336da99a3aad83
-
SHA1
28a64221c4a0fa26c1e287ef55decbebcecb2cbc
-
SHA256
84d24b6827f8f539fccab694c80966936317d576d26256ecd91524ea9dbae8c1
-
SHA512
2c1b9b96516e659d8ea019e99070aacc8341a880f66e03efcaf3a85ac66cdb14ae8a8fd0e6095fe353ec2bc6eb2212310d7952a3c5e9b3f9c2cc3aa377d5a08a
-
SSDEEP
384:IsebzH0ztMe6/Uv/5rEZWtjYaPlTLX218nSsqRCGD5iugCK1iuZrVO48UlMaXNXN:IsAHqMe6q/ZEHat/2+S1wGjuDU4PNd
Malware Config
Signatures
Files
-
84d24b6827f8f539fccab694c80966936317d576d26256ecd91524ea9dbae8c1.exe windows x86
7e8ed5c2fc436abed21f0da9f6eac438
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
GetMessageA
LoadStringA
RegisterClassExA
LoadCursorA
LoadIconA
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
MessageBoxA
DefWindowProcA
DestroyWindow
SendMessageA
DispatchMessageA
kernel32
GetCurrentDirectoryA
HeapAlloc
CreateFileA
ReadFile
CloseHandle
LoadLibraryA
GetProcessHeap
GetModuleHandleA
GetStartupInfoA
GetLocalTime
DeviceIoControl
CompareStringW
ReplaceFileA
RemoveDirectoryA
FindNextVolumeA
GetDiskFreeSpaceA
SetFileAttributesA
CopyFileA
msvcrt
_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ