Static task
static1
Behavioral task
behavioral1
Sample
84cae93e9b38fc1e31553b185ff959b7c0f39ec4d876a6e8f22f10da0085eb6a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
84cae93e9b38fc1e31553b185ff959b7c0f39ec4d876a6e8f22f10da0085eb6a.exe
Resource
win10v2004-20221111-en
General
-
Target
84cae93e9b38fc1e31553b185ff959b7c0f39ec4d876a6e8f22f10da0085eb6a
-
Size
121KB
-
MD5
131dc7a3f7ca7e51e16e2bb362c01c80
-
SHA1
c5599c89afe3b6e49843a25ad5a0b31e018491e5
-
SHA256
84cae93e9b38fc1e31553b185ff959b7c0f39ec4d876a6e8f22f10da0085eb6a
-
SHA512
f3896d483ba2a2c82acbf42196a66e40f47b71e14cd27654b91dacdc84885e65938d9e9be69918e85cef2694ecfac66faa52bea8541f3f2a05308ef9a467ab57
-
SSDEEP
1536:iUK3ATn6Q1w6ZnBbWxu5hb86HTU879i0PORJrqpzuQf9H+:SwTJPl9Wxuw6HTqR4p9
Malware Config
Signatures
Files
-
84cae93e9b38fc1e31553b185ff959b7c0f39ec4d876a6e8f22f10da0085eb6a.exe windows x86
cf4c8c331e1c03c058eca710d9dcee77
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerInstallFileA
VerQueryValueA
GetFileVersionInfoA
user32
IntersectRect
MessageBoxA
DestroyCursor
SetCapture
SetParent
DefFrameProcA
LoadKeyboardLayoutA
GetClassLongA
GetMenuItemCount
MessageBeep
GetSystemMenu
RemovePropA
RegisterWindowMessageA
DefWindowProcA
GetKeyboardState
SetFocus
ReleaseCapture
IsChild
GetTopWindow
CallNextHookEx
ScreenToClient
SetScrollInfo
DrawIcon
OffsetRect
SetMenuItemInfoA
LoadStringA
PeekMessageW
IsWindowUnicode
DispatchMessageA
gdi32
CreatePenIndirect
kernel32
SetFilePointer
GetLastError
GetModuleHandleA
CloseHandle
VirtualAllocEx
GetTickCount
GetProcAddress
DeleteFileA
GetCurrentThreadId
ExitThread
LocalAlloc
advapi32
RegDeleteKeyA
RegEnumValueA
shlwapi
PathIsDirectoryA
PathFileExistsA
SHQueryInfoKeyA
PathIsContentTypeA
shell32
SHGetSpecialFolderLocation
SHGetDiskFreeSpaceA
Shell_NotifyIconA
SHGetFileInfoA
comdlg32
GetFileTitleA
FindTextA
ole32
CoTaskMemFree
CoReleaseMarshalData
StringFromIID
CoGetContextToken
comctl32
ImageList_Draw
ImageList_DrawEx
ImageList_Destroy
oleaut32
SysAllocStringLen
VariantCopyInd
SysReAllocStringLen
RegisterTypeLib
SafeArrayPtrOfIndex
SysStringLen
GetErrorInfo
SysFreeString
SafeArrayGetUBound
SafeArrayCreate
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 430B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ