Static task
static1
Behavioral task
behavioral1
Sample
84cb8be3b9edcd292a74b7e43214741b6f541d989d77f89b3002d008a2029c7d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
84cb8be3b9edcd292a74b7e43214741b6f541d989d77f89b3002d008a2029c7d.exe
Resource
win10v2004-20220901-en
General
-
Target
84cb8be3b9edcd292a74b7e43214741b6f541d989d77f89b3002d008a2029c7d
-
Size
311KB
-
MD5
d4a444286fc17770557a60e650090c38
-
SHA1
0f00baa5d420f2afb7b80a54f890930cf40e6f3d
-
SHA256
84cb8be3b9edcd292a74b7e43214741b6f541d989d77f89b3002d008a2029c7d
-
SHA512
dc826dd8cf0b4bacea3495d1870fb1c08728d2095ec20b1b7df632344372aa2a500c1cc3e7eb4d21cc9f0781e2cbedeb0595935ea8f3521314c75f43c1ddf99a
-
SSDEEP
6144:EfSby/0nKkjt6U917asZ1r0yVb+yB7vmK/bv+A8B5BddBxJ592v:1kgZfirYWA8bBnS
Malware Config
Signatures
Files
-
84cb8be3b9edcd292a74b7e43214741b6f541d989d77f89b3002d008a2029c7d.exe windows x86
14d7b8fa7b943fe7eb3132d50481dcdd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CLSIDFromString
CoTaskMemFree
StringFromCLSID
CoCreateInstance
gdi32
CreateFontIndirectW
GetLayout
oleaut32
VarBstrCmp
SysStringLen
GetErrorInfo
VariantInit
SysAllocStringLen
SysStringByteLen
SysAllocString
SysAllocStringByteLen
VariantClear
SysFreeString
kernel32
lstrlenW
IsDebuggerPresent
lstrlenA
DeleteCriticalSection
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
UnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
GetModuleHandleA
VirtualAlloc
user32
GetDC
DialogBoxIndirectParamW
CreateAcceleratorTableA
LoadMenuW
DestroyCursor
OffsetRect
LoadImageA
LoadImageW
wsprintfW
MonitorFromRect
EnumWindows
WinHelpA
ShowCursor
SetActiveWindow
FindWindowA
CharPrevA
CheckMenuItem
IsIconic
LoadIconA
corpol
CORLockDownProvider
DllUnregisterServer
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 264KB - Virtual size: 375KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ