Behavioral task
behavioral1
Sample
85486af7b9135ac8835c6e3a55cba22290b3f1c225220c1edeaa83e917690f8a.exe
Resource
win7-20220901-en
General
-
Target
85486af7b9135ac8835c6e3a55cba22290b3f1c225220c1edeaa83e917690f8a
-
Size
292KB
-
MD5
7d28a193f98076e664e867465f8e3036
-
SHA1
436149160a074611e1a37e575e36cc0e73a6ad10
-
SHA256
85486af7b9135ac8835c6e3a55cba22290b3f1c225220c1edeaa83e917690f8a
-
SHA512
924d277c4e4f2b24e9ae9056cc8b29a734d0b0000f6bb90356070b9ea117398619d312cb913a586296ff6091f88142d8198cf58b45e104c325a60f0d7fdb7ffb
-
SSDEEP
6144:qDxBj6B6kQu1WTminflPN80PxpkJP9sF2GtxvEvCOw5bImJIU:r6k+Tmin80PPesFFxMv2BImGU
Malware Config
Signatures
Files
-
85486af7b9135ac8835c6e3a55cba22290b3f1c225220c1edeaa83e917690f8a.exe windows x86
0665338e7db8c286b4b6282bf49909b4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
TlsSetValue
lstrcpyW
Sleep
LoadLibraryA
VirtualProtect
GetModuleFileNameA
user32
GetKeyboardType
CreateWindowExA
MessageBoxA
advapi32
RegQueryValueExA
ReportEventA
StartServiceA
SetSecurityInfo
oleaut32
SysFreeString
SafeArrayPtrOfIndex
mpr
WNetOpenEnumA
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
shell32
Shell_NotifyIconA
wininet
InternetReadFile
wsock32
WSACleanup
winmm
waveOutWrite
avicap32
capCreateCaptureWindowA
msacm32
acmFormatChooseA
ws2_32
WSAIoctl
Sections
.nsp0 Size: - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 269KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 532B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX1 Size: 27B - Virtual size: 27B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.arma Size: 27B - Virtual size: 27B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Xtreme Size: 27B - Virtual size: 27B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ