szFile
Static task
static1
Behavioral task
behavioral1
Sample
85c6355439c29b315ffba12eca84224e7c2a3c8d6b83f96f6dd1ca8c77cd358e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
85c6355439c29b315ffba12eca84224e7c2a3c8d6b83f96f6dd1ca8c77cd358e.exe
Resource
win10v2004-20220812-en
General
-
Target
85c6355439c29b315ffba12eca84224e7c2a3c8d6b83f96f6dd1ca8c77cd358e
-
Size
9KB
-
MD5
8c71db1fe9a72ec280e4f631d1718374
-
SHA1
02dc0bb66948f4cb1bd27153cc586b3c19e7399a
-
SHA256
85c6355439c29b315ffba12eca84224e7c2a3c8d6b83f96f6dd1ca8c77cd358e
-
SHA512
9c8306fdd71a113be577de85598ee9867751f441b8c467e8149fd306a77c7bf7d18c538fbe4c1d95d228951f14d30fa45a87f3f877d9e9ba4f39fff047b9e844
-
SSDEEP
192:x1Mpkm2vnLC1mMCWgrbFQrN9GWZnrNeQhCvML2De:x1Okm2PLCk0MFG9Gqpe0CvhD
Malware Config
Signatures
Files
-
85c6355439c29b315ffba12eca84224e7c2a3c8d6b83f96f6dd1ca8c77cd358e.exe windows x86
a1cd5fc44c2e050e3801bb600f55c044
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetSystemTime
InitializeCriticalSection
GetVersionExA
GetCurrentProcess
GetTempPathA
GetComputerNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetModuleHandleA
GetSystemTimeAdjustment
GetWindowsDirectoryA
GetTickCount
GetTimeZoneInformation
GetLogicalDrives
GetModuleFileNameA
CloseHandle
GetCurrentThread
GetSystemTimeAsFileTime
DeleteFileA
GetLongPathNameA
Sleep
ExitProcess
GetCommandLineA
EnterCriticalSection
GetProcAddress
LeaveCriticalSection
GetSystemInfo
GetCurrentProcessId
wininet
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
DeleteUrlCacheEntry
lz32
LZCopy
LZOpenFileA
LZClose
msvcrt
??3@YAXPAX@Z
??2@YAPAXI@Z
atoi
strncmp
strchr
strstr
strncpy
strrchr
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE