Static task
static1
Behavioral task
behavioral1
Sample
84859f1ee33a049cd4522d688ea5ea7b5d1acff394c642b68f2722b2a15480be.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
84859f1ee33a049cd4522d688ea5ea7b5d1acff394c642b68f2722b2a15480be.exe
Resource
win10v2004-20221111-en
General
-
Target
84859f1ee33a049cd4522d688ea5ea7b5d1acff394c642b68f2722b2a15480be
-
Size
536KB
-
MD5
0ca0332c854ac69eb8260d1a1ea41d1a
-
SHA1
db62592b737b0fefbbbc1c1c16ae7defed2870a9
-
SHA256
84859f1ee33a049cd4522d688ea5ea7b5d1acff394c642b68f2722b2a15480be
-
SHA512
b824c48fb0ace8d3af960dddc5d81f4546f8fc5700c89496eca45a4075adb78d653e5e91118c7aae9edb8f76c2f018a43fa59d5d7985a6923968ac48c9fe6daf
-
SSDEEP
12288:gwB4V0puvt8k7kEjINM10JDx5+sh8dJSJt:uVfvm2aAKDx5fh8d
Malware Config
Signatures
Files
-
84859f1ee33a049cd4522d688ea5ea7b5d1acff394c642b68f2722b2a15480be.exe windows x86
cfc828fac367f6b4d6d50c773a172575
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
CreateFileW
GetDriveTypeW
lstrlenA
Sleep
HeapCreate
GetModuleFileNameW
CloseHandle
LocalFlags
GetModuleHandleA
GetFileTime
IsDebuggerPresent
DeviceIoControl
GetCommandLineA
CloseHandle
GetStartupInfoA
CreateFileMappingW
LocalSize
GetConsoleAliasW
DeleteFileA
user32
IsWindow
BeginPaint
IsZoomed
PeekMessageA
DispatchMessageA
GetWindowLongA
LoadImageA
DispatchMessageA
DrawTextW
GetIconInfo
CallWindowProcW
DestroyMenu
DestroyWindow
dmcompos
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer
rasapi32
DwCloneEntry
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 529KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ