Static task
static1
Behavioral task
behavioral1
Sample
685e316a2ff1e7e92abcec8bacf1d4ffb16254914cfdcae5bd27c7993a701752.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
685e316a2ff1e7e92abcec8bacf1d4ffb16254914cfdcae5bd27c7993a701752.exe
Resource
win10v2004-20221111-en
General
-
Target
685e316a2ff1e7e92abcec8bacf1d4ffb16254914cfdcae5bd27c7993a701752
-
Size
2.7MB
-
MD5
84736527181bc7e2a0f36658fd898669
-
SHA1
77cfed517352e9db3b257692c32289353cbd7005
-
SHA256
685e316a2ff1e7e92abcec8bacf1d4ffb16254914cfdcae5bd27c7993a701752
-
SHA512
35f70f132dbf420393b5b520a320bb87fc0fce79ff495ad861e736602fc5b8916cd2fa02e2dc004f0f71cce564bb2d5f99afbcd7dd20e575349cb5f22c87b3b0
-
SSDEEP
49152:Sl2NG7ikbqpsdYBWx7xQd5eou47+sjUFP2+qAa/Dui8mR+tZPvSat74ml:Sl2NGusYBWZO5eou4LX8pZSaV4O
Malware Config
Signatures
Files
-
685e316a2ff1e7e92abcec8bacf1d4ffb16254914cfdcae5bd27c7993a701752.exe windows x86
a2ac78ab07e9bf15346c5ecd315b6d13
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileStructA
CreateNamedPipeA
GetCurrentDirectoryA
MoveFileExA
GetLocalTime
RtlMoveMemory
GetDateFormatA
GlobalGetAtomNameA
GetCPInfoExA
RemoveDirectoryA
FindFirstFileExA
RemoveDirectoryW
GetFileAttributesA
VirtualAllocEx
GetLogicalDriveStringsA
GetNamedPipeHandleStateA
MapViewOfFileEx
GlobalHandle
ReadConsoleA
WriteConsoleOutputCharacterA
GetConsoleWindow
AddConsoleAliasA
IsBadCodePtr
GetModuleFileNameA
lstrcat
GetFileInformationByHandle
SetConsoleTitleA
OpenJobObjectA
GetConsoleWindow
SetInformationJobObject
_hread
LZCopy
RegisterWaitForInputIdle
GetLastError
Process32First
WriteConsoleInputA
GlobalSize
FindNextFileA
GetThreadPriorityBoost
UnlockFile
dpnlobby
DirectPlay8LobbyCreate
advapi32
CredGetTargetInfoA
user32
GetWindow
DlgDirListComboBoxA
PostMessageA
RegisterClipboardFormatA
ShowStartGlass
SetMenu
GetUserObjectInformationA
IsCharLowerA
SetWindowsHookExW
GetSysColor
GetUpdateRgn
GetWindow
SendMessageTimeoutA
UpdatePerUserSystemParameters
AllowSetForegroundWindow
TranslateAcceleratorA
IsCharLowerA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 801KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 395KB - Virtual size: 394KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ