Static task
static1
Behavioral task
behavioral1
Sample
85870c4945d67ec0113ea65c176f58b00d6cf60889afb5b764b78472534be4e1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
85870c4945d67ec0113ea65c176f58b00d6cf60889afb5b764b78472534be4e1.exe
Resource
win10v2004-20220901-en
General
-
Target
85870c4945d67ec0113ea65c176f58b00d6cf60889afb5b764b78472534be4e1
-
Size
60KB
-
MD5
efead5192d114caf6f74dc3361617c09
-
SHA1
806a30edde929697b99c72fde63efb2e395d5db3
-
SHA256
85870c4945d67ec0113ea65c176f58b00d6cf60889afb5b764b78472534be4e1
-
SHA512
ebef0955639a9d31e9ba026b52b86f9196b3997b0dec6d63e85ddba281201401e3d37fb34b18ce4022f7797370eed09c09241bc46e7d11b9b7dbde2a08696eca
-
SSDEEP
1536:zrSrGdsc1AUNTWKaXR1z0m+rY5ZvDSHRh:a6GmAETKB1zNPaxh
Malware Config
Signatures
Files
-
85870c4945d67ec0113ea65c176f58b00d6cf60889afb5b764b78472534be4e1.exe windows x86
b13545902a33a4fce97c4e9afd63445d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
msvbvm60
ord696
Sections
pec1 Size: 52KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE