Static task
static1
Behavioral task
behavioral1
Sample
85c1f1c0bc86a1f5981869d35beb562353572c75a4af78420c73af74135dbdb8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
85c1f1c0bc86a1f5981869d35beb562353572c75a4af78420c73af74135dbdb8.exe
Resource
win10v2004-20220812-en
General
-
Target
85c1f1c0bc86a1f5981869d35beb562353572c75a4af78420c73af74135dbdb8
-
Size
270KB
-
MD5
be762dbd23b8021a9c9e44131b2eddab
-
SHA1
7f1f1fb93a0388e5cb8a3c915d154ea301340616
-
SHA256
85c1f1c0bc86a1f5981869d35beb562353572c75a4af78420c73af74135dbdb8
-
SHA512
272e206ec73c1706fa0d3009cbd02933a1d6c4060572b90f7a39f19d0118e1a08f9c6c85950dd9d5fb889437126f0cb1756783fccb4b9028dc5ec0ab4bb68186
-
SSDEEP
6144:ygFjtqOh4/HL2J6TmFYWfw86InR9WGMtiWuwRmjfZpz5M2O6YU2nLrc:ygFQOkA6IY8RVeR0ROLY
Malware Config
Signatures
Files
-
85c1f1c0bc86a1f5981869d35beb562353572c75a4af78420c73af74135dbdb8.exe windows x86
d01fa3b02c47985bd5816f7dfe482c6d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLangID
VirtualAlloc
VirtualFree
GetBinaryTypeA
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
HeapSize
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
FindResourceExW
FindResourceW
oleaut32
OleSavePictureFile
SysAllocStringByteLen
SafeArrayUnaccessData
SysReAllocStringLen
OleLoadPictureFileEx
ClearCustData
OleLoadPictureFile
msvfw32
ICInfo
Sections
.text Size: 149KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ