Static task
static1
Behavioral task
behavioral1
Sample
84d7fd135125039c65bb299fed0d7ec1069a4b2804be04ad1addee6c22086697.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
84d7fd135125039c65bb299fed0d7ec1069a4b2804be04ad1addee6c22086697.exe
Resource
win10v2004-20221111-en
General
-
Target
84d7fd135125039c65bb299fed0d7ec1069a4b2804be04ad1addee6c22086697
-
Size
93KB
-
MD5
31957884cf62d60db74ee6d4e0bcffd7
-
SHA1
4475c1775881a88fe826f0be594a0b9b47e1b89d
-
SHA256
84d7fd135125039c65bb299fed0d7ec1069a4b2804be04ad1addee6c22086697
-
SHA512
d1fe4d4ab7e04e2842d3811050733772959c3c805e38db143b51e0c5dd46eddb45369edfa2132caa94d94fb023ea7bcef95a738c726f7c654a1ecb1c0cdea7ae
-
SSDEEP
1536:y4eMjfKg+ZtzEzTyZvuqc7FWT5U280S0WNURKry5t1AYl6On7WOREUn9VR3p3SWj:yPMOIKG7FI5UQHK4Rl6OnC69VR3xP7o
Malware Config
Signatures
Files
-
84d7fd135125039c65bb299fed0d7ec1069a4b2804be04ad1addee6c22086697.exe windows x86
514db0b0d09be304b77fea830bc054d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringA
LCMapStringW
SetStdHandle
GetStringTypeA
GetStringTypeW
FlushFileBuffers
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetModuleHandleA
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetLastError
ReadFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
CloseHandle
user32
SetCapture
InsertMenuItemW
InSendMessage
CharLowerBuffA
CheckDlgButton
IMPSetIMEW
comctl32
FlatSB_ShowScrollBar
FlatSB_SetScrollInfo
ImageList_SetDragCursorImage
ord14
ord4
DrawStatusTextW
ImageList_DragEnter
shlwapi
SHEnumKeyExA
PathIsRelativeW
UrlIsNoHistoryA
StrCpyW
StrChrA
SHDeleteOrphanKeyW
PathIsRootA
PathIsUNCA
SHDeleteEmptyKeyA
SHQueryInfoKeyA
SHQueryValueExW
SHEnumValueA
StrIsIntlEqualA
UrlGetLocationW
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ