?BattleModeStepAwway@@YG_KPAU_PSP@@@Z
Static task
static1
Behavioral task
behavioral1
Sample
8656e6909aadf319cddf7ff8ab0d0697c563fe1e69b928937962d1687489d613.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8656e6909aadf319cddf7ff8ab0d0697c563fe1e69b928937962d1687489d613.exe
Resource
win10v2004-20221111-en
General
-
Target
8656e6909aadf319cddf7ff8ab0d0697c563fe1e69b928937962d1687489d613
-
Size
142KB
-
MD5
4ada441f9b1037dcfa7e765efc63bd63
-
SHA1
e9f3be9e7e02eb54694a9bf86e8507c619b9e777
-
SHA256
8656e6909aadf319cddf7ff8ab0d0697c563fe1e69b928937962d1687489d613
-
SHA512
a0234ada6dae3e986b7554d20a0224e92b881458c39a4327a46fcef113781d85d00edd61ba6bdfd5c3c01a974b5e664b54d0a9dc17aa4596433f7e9424f749f2
-
SSDEEP
3072:co+6hM6xsQlLi+kvxxJGGvY6NvdeeQJ56z03DKS6iG:co+TSsQl5kvF1RNpz0W5iG
Malware Config
Signatures
Files
-
8656e6909aadf319cddf7ff8ab0d0697c563fe1e69b928937962d1687489d613.exe windows x86
dcdfec346d5be8d1c3011f2add16046c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowDC
IsCharAlphaA
kernel32
CreateEventA
shlwapi
PathIsPrefixW
StrStrW
Exports
Exports
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bdat Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdat Size: 512B - Virtual size: 495B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vdat Size: - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ