Static task
static1
Behavioral task
behavioral1
Sample
85034b2e6a924212a0f1790590271de8dfcd3126f25a828d0fb49c7d8c129c40.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
85034b2e6a924212a0f1790590271de8dfcd3126f25a828d0fb49c7d8c129c40.exe
Resource
win10v2004-20220901-en
General
-
Target
85034b2e6a924212a0f1790590271de8dfcd3126f25a828d0fb49c7d8c129c40
-
Size
27.9MB
-
MD5
f1c25d753ef8357f3ba0f536a3ee9804
-
SHA1
b5a528ed33eed7964d6a0733c766ce6a8b3be4a9
-
SHA256
85034b2e6a924212a0f1790590271de8dfcd3126f25a828d0fb49c7d8c129c40
-
SHA512
049cfabcc4b35489710e9dff26ac570865cb55312d8d0696c6447a039facf34af2238ecb0fcc9968878adda085efbc9baa69d3ec29ba88a6aa6676059ec03679
-
SSDEEP
786432:GMHSnx7w5o9wU2ae3RHt/0w5c9E0M8SEAT2Bd:XU9w5o6hHt/7dp8TAT2j
Malware Config
Signatures
Files
-
85034b2e6a924212a0f1790590271de8dfcd3126f25a828d0fb49c7d8c129c40.exe windows x86
8e2d38e8499fbff967379f1edc9f7b0f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetProcAddress
GetLocaleInfoW
GetModuleHandleA
ResumeThread
IsValidLocale
SetUnhandledExceptionFilter
EnterCriticalSection
SetErrorMode
user32
LoadAcceleratorsA
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorW
Sections
A Size: 2KB - Virtual size: 988B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
W Size: 2KB - Virtual size: 794B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
2 Size: 2KB - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 2KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
2 Size: 2KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
kJv Size: 224KB - Virtual size: 224KB
IMAGE_SCN_MEM_READ
JOK Size: 224KB - Virtual size: 224KB
IMAGE_SCN_MEM_READ
Z2p Size: 320KB - Virtual size: 320KB
IMAGE_SCN_MEM_READ