Static task
static1
Behavioral task
behavioral1
Sample
85efc3660e982b37f5528de52970813ec320e2e65198f13726fed78d1f58eb34.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
85efc3660e982b37f5528de52970813ec320e2e65198f13726fed78d1f58eb34.exe
Resource
win10v2004-20220812-en
General
-
Target
85efc3660e982b37f5528de52970813ec320e2e65198f13726fed78d1f58eb34
-
Size
157KB
-
MD5
76dd9052d022670316816008737ad887
-
SHA1
984db64bdb590c21e1a070871bd28cf324bb0f9e
-
SHA256
85efc3660e982b37f5528de52970813ec320e2e65198f13726fed78d1f58eb34
-
SHA512
e5b663d4c7f02571648a14f8841741197c3df985354599616f199d778c02db5a240c607eaad33f4eaace69034c55aaa33b14d24809bedbfa50cb785825003b24
-
SSDEEP
3072:H4nGU8f7fgB3JdGhTUCLsajEeQmXgDPLbYqGBJ2ONMDkxE53+q:YGU8zfSjG5ZsaIMgDP4FKZDYEF
Malware Config
Signatures
Files
-
85efc3660e982b37f5528de52970813ec320e2e65198f13726fed78d1f58eb34.exe windows x86
2fc57f408904a40ca36e69133f183cbc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadPriority
ReadFile
IsValidCodePage
SearchPathW
BuildCommDCBAndTimeoutsW
DisableThreadLibraryCalls
_hread
SetConsoleCtrlHandler
EnumDateFormatsA
GetProcAddress
CancelTimerQueueTimer
InitializeCriticalSection
WideCharToMultiByte
ProcessIdToSessionId
LockFile
FindFirstVolumeMountPointA
GetTapeParameters
InterlockedDecrement
GetModuleHandleA
SetCommState
WriteConsoleInputA
GetLogicalDrives
LoadLibraryA
MulDiv
ReleaseSemaphore
ChangeTimerQueueTimer
GetFullPathNameW
EraseTape
DebugActiveProcess
WriteProfileStringW
SetVolumeMountPointW
GetHandleInformation
GetPrivateProfileStructA
CompareStringA
SetCalendarInfoW
ScrollConsoleScreenBufferA
Module32Next
RequestWakeupLatency
GetStartupInfoA
SetInformationJobObject
PostQueuedCompletionStatus
GetTempFileNameA
GetPrivateProfileIntW
SetCommBreak
EnumUILanguagesA
FindResourceExW
OpenJobObjectW
GlobalDeleteAtom
CreateDirectoryA
TlsGetValue
SetConsoleWindowInfo
AllocateUserPhysicalPages
ResumeThread
FileTimeToSystemTime
SetConsoleMode
LockFileEx
GetProfileIntW
FoldStringA
FindFirstVolumeW
ExpandEnvironmentStringsW
ReadConsoleOutputAttribute
DnsHostnameToComputerNameW
GetProcessTimes
GetAtomNameW
GetSystemTimeAsFileTime
GetProcessShutdownParameters
GetVersionExA
GetCalendarInfoW
GetProcessAffinityMask
GetSystemDirectoryW
GetLocaleInfoA
FillConsoleOutputCharacterW
ReadFileEx
GetLargestConsoleWindowSize
msvcrt
_wspawnvpe
fscanf
strcoll
__setusermatherr
_futime64
vwprintf
_wremove
srand
_ismbbpunct
mbstowcs
_acmdln
_execle
__set_app_type
_wexecle
_exit
_getmaxstdio
_tzname
_initterm
_inpw
_except_handler3
_time64
_commit
_wopen
feof
iswlower
_nextafter
_XcptFilter
memset
system
strtoul
exit
fread
_mbsnicmp
strtok
_wexeclpe
_isnan
_mbcasemap
_ftime64
_isctype
strspn
fputwc
wcsrchr
acos
_mbsnbcmp
getwchar
__p__fmode
_setmode
_mbscat
_snscanf
_vsnwprintf
_wspawnle
__p__commode
_getsystime
_wpgmptr
_getpid
_get_heap_handle
_heapadd
strstr
_mbsicoll
_controlfp
_ismbclower
iswprint
_chdrive
_winmajor
_scprintf
_gcvt
__getmainargs
_wcmdln
swscanf
memcpy
isdigit
_wcsrev
_winver
_ismbslead
_getwche
putwc
ldexp
_heapwalk
_aligned_free
vprintf
_adjust_fdiv
wcstok
wcschr
_stati64
_putw
fwscanf
atof
fputs
isleadbyte
_mbsnbset
_seh_longjmp_unwind
_wgetdcwd
fgetpos
user32
GetKeyboardState
GetPropA
DdeClientTransaction
OpenDesktopA
DlgDirListComboBoxA
GetLastInputInfo
CharPrevW
TileChildWindows
ChildWindowFromPoint
GetListBoxInfo
RealGetWindowClassW
LockSetForegroundWindow
ScrollWindowEx
LoadMenuA
TranslateMessage
EnumDisplayDevicesA
UnhookWinEvent
SetUserObjectInformationW
LockWindowUpdate
DdeQueryStringA
IsDialogMessageW
GetMenuItemInfoA
AnimateWindow
DdeAddData
PostMessageW
CharNextExA
BringWindowToTop
InvalidateRect
GetClassLongA
CreateAcceleratorTableW
OpenIcon
DlgDirSelectComboBoxExA
EditWndProc
GetSubMenu
GetMessagePos
SetWindowLongA
GetCursorPos
GetWindowModuleFileNameW
CharLowerA
DdeDisconnect
GetDlgItemTextA
CheckMenuItem
GetKBCodePage
DdeCreateStringHandleA
RegisterClipboardFormatW
BeginPaint
FlashWindowEx
DdeReconnect
EnumDisplaySettingsW
ScrollDC
GetClassInfoA
VkKeyScanA
CreatePopupMenu
MonitorFromRect
GetKeyNameTextA
Sections
.text Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ