Static task
static1
Behavioral task
behavioral1
Sample
a84a3f1794431cea348a607d1bd211ba7e9daaf9aa11bb6db2b841af7388a9dc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a84a3f1794431cea348a607d1bd211ba7e9daaf9aa11bb6db2b841af7388a9dc.exe
Resource
win10v2004-20221111-en
General
-
Target
a84a3f1794431cea348a607d1bd211ba7e9daaf9aa11bb6db2b841af7388a9dc
-
Size
20KB
-
MD5
695df4422cd2a79178a0a5d15cbf3c72
-
SHA1
3be17ec7928e2d54d3464d4f67cc8501063a284f
-
SHA256
a84a3f1794431cea348a607d1bd211ba7e9daaf9aa11bb6db2b841af7388a9dc
-
SHA512
78b1ddefa1f05bb1c157674ab71497dd389419d3626fedfc9e2b4e0928ef2d9b0ce05d51cf11cef42426f093eed308056919abff5691add80b3a2e58ff7fff9b
-
SSDEEP
384:YlUEizlp3c3FNBWRiCHhG6hUd3HkmV7HvaY/mA:TW3zmTGkUtkMPFf
Malware Config
Signatures
Files
-
a84a3f1794431cea348a607d1bd211ba7e9daaf9aa11bb6db2b841af7388a9dc.exe windows x86
fc3585e1b72cdb1b0bf0e08329c202f3
Code Sign
24:8d:dd:74:06:c0:61:a3:40:b9:a9:82:77:40:e4:edCertificate
IssuerCN=IqoqaqNot Before14/02/2012, 08:46Not After31/12/2039, 23:59SubjectCN=Iqoqaq69:7a:1e:f2:c2:83:ea:71:72:93:8f:1e:fc:47:a4:bd:f5:ef:87:18Signer
Actual PE Digest69:7a:1e:f2:c2:83:ea:71:72:93:8f:1e:fc:47:a4:bd:f5:ef:87:18Digest Algorithmsha1PE Digest MatchesfalseSignature Validations
TrustedfalseVerification
Signing CertificateCN=Iqoqaq28/11/2022, 11:52 Valid: false
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
LoadLibraryA
Sleep
GetProcAddress
VirtualFree
GetModuleHandleA
ExitProcess
VirtualAlloc
user32
GetMessageA
LoadImageA
PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow
GetClientRect
DispatchMessageA
DefWindowProcA
CreateWindowExA
EndPaint
gdi32
GetObjectA
SelectObject
CreateCompatibleDC
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 768B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 256B - Virtual size: 71B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE