Static task
static1
Behavioral task
behavioral1
Sample
85e576f5d0768d9274fafcfaf6255d08100e9c98f0a290cdce73d0de6b2812e0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
85e576f5d0768d9274fafcfaf6255d08100e9c98f0a290cdce73d0de6b2812e0.exe
Resource
win10v2004-20221111-en
General
-
Target
85e576f5d0768d9274fafcfaf6255d08100e9c98f0a290cdce73d0de6b2812e0
-
Size
41KB
-
MD5
f766495835976c2e2879d2b5accb061b
-
SHA1
470b74f9d5f0dd48cdfedece463410d378f1d036
-
SHA256
85e576f5d0768d9274fafcfaf6255d08100e9c98f0a290cdce73d0de6b2812e0
-
SHA512
79171b23cbbdc5bd05027f35c8d8a419adab6133416c5ea87e009c423be65d8432d71d0e1537cca36012c5a51f0867552879e293f996b174c07d67f2cf31bc81
-
SSDEEP
768:AqRFkdvVtjF9uviRhOO25El3l/RKIKzQRxOhVEzHP9Qe:AqyVtjFEqRhOszJKIKzQRsjE77
Malware Config
Signatures
Files
-
85e576f5d0768d9274fafcfaf6255d08100e9c98f0a290cdce73d0de6b2812e0.exe windows x86
25a7bb74614f26d6c4ccf79d63da412a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MapViewOfFile
HeapDestroy
ResumeThread
LocalFree
VirtualAlloc
GetPrivateProfileIntA
GetComputerNameA
GetSystemTime
GetModuleHandleW
IsDebuggerPresent
FindAtomA
GetPriorityClass
lstrlenA
ResetEvent
GetCommandLineA
CreateFileMappingA
ExitProcess
CloseHandle
GetFileAttributesA
LoadLibraryA
user32
DrawStateA
DestroyCaret
GetClientRect
CallWindowProcA
FillRect
GetDlgItem
EndDialog
GetClassInfoA
CreateWindowExA
CloseWindow
GetMenu
GetCaretPos
DispatchMessageA
rasapi32
DwRasUninitialize
RasDialA
DwEnumEntryDetails
RasDeleteEntryA
DwCloneEntry
certcli
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ