Static task
static1
Behavioral task
behavioral1
Sample
84018b6e0bdb702fa1908c70508e4344e48296a34028dd91672af00e8c548a05.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
84018b6e0bdb702fa1908c70508e4344e48296a34028dd91672af00e8c548a05.exe
Resource
win10v2004-20220901-en
General
-
Target
84018b6e0bdb702fa1908c70508e4344e48296a34028dd91672af00e8c548a05
-
Size
60KB
-
MD5
652fedde7d82334aa02e1b4256842906
-
SHA1
763e4250755cbb36c1e32c591d757f09e08bac4c
-
SHA256
84018b6e0bdb702fa1908c70508e4344e48296a34028dd91672af00e8c548a05
-
SHA512
9f6d5e0b820bfec8f393bdadf047a2c4394073b078304972b8addd58b0d453eaa734a95cd082c5a014edb976c3f6355eff5e854cc1f5fba85d22d46835ea4efe
-
SSDEEP
1536:3cuHNwsCZE/isKldf1dMlRmBQD0WWqBhjSisKldf:3c07Q1b1dAmB0Wwhb
Malware Config
Signatures
Files
-
84018b6e0bdb702fa1908c70508e4344e48296a34028dd91672af00e8c548a05.exe windows x86
2d31c11ac42b24fa76764b521ec6c616
Code Sign
27:49:32:60:6e:e5:e2:79:bb:45:6a:08:cb:0b:85:ebCertificate
IssuerCN=QiaqiarowawoaNot Before31/12/2010, 21:00Not After31/12/2039, 23:59SubjectCN=Qiaqiarowawoaee:61:d5:69:f1:6f:64:fc:5f:d0:d9:8e:f6:b9:b1:71:73:76:e1:d3Signer
Actual PE Digestee:61:d5:69:f1:6f:64:fc:5f:d0:d9:8e:f6:b9:b1:71:73:76:e1:d3Digest Algorithmsha1PE Digest MatchesfalseSignature Validations
TrustedfalseVerification
Signing CertificateCN=Qiaqiarowawoa01/12/2022, 14:34 Valid: false
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetComputerNameA
GetLastError
GetModuleHandleA
ExitProcess
GetSystemDirectoryA
GetSystemInfo
GetVersion
LoadLibraryA
WaitForSingleObject
GetProcAddress
user32
KillTimer
advapi32
GetUserNameA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE