Static task
static1
Behavioral task
behavioral1
Sample
8f85b77221760055d2bd6db74f51c6320f45c176d779a2c6982f9e11c7832775.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8f85b77221760055d2bd6db74f51c6320f45c176d779a2c6982f9e11c7832775.exe
Resource
win10v2004-20221111-en
General
-
Target
8f85b77221760055d2bd6db74f51c6320f45c176d779a2c6982f9e11c7832775
-
Size
938KB
-
MD5
25f56909b5e11903f28f8cf1f01220fd
-
SHA1
3ead3a07cb34fdc2ea0d5d909abd35c6701743c2
-
SHA256
8f85b77221760055d2bd6db74f51c6320f45c176d779a2c6982f9e11c7832775
-
SHA512
084a30f7fc1955707cc165539c90b188222e8cfd2d76dbeb412cec4b13cbd4cd73858d33ada6ae41d8335ded50e14189f90b33c50d29bdd461d1ac5fc29b831e
-
SSDEEP
24576:P85f9NrlXn/KqVsAt7A3PYLN4x979s4VJAnpPi:kfHlX/fCeWu49i4VJAp
Malware Config
Signatures
Files
-
8f85b77221760055d2bd6db74f51c6320f45c176d779a2c6982f9e11c7832775.exe windows x86
45bfe9500daea4a4a7b51794c7623517
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
SaveDC
ole32
OleDraw
comctl32
ImageList_Add
winmm
timeGetTime
wsock32
WSACleanup
Sections
.MPRESS1 Size: 927KB - Virtual size: 11.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE