Static task
static1
Behavioral task
behavioral1
Sample
85f7788b4acbd901137d9ad779491ca0398789168a64aeaad6157ac9570232a3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
85f7788b4acbd901137d9ad779491ca0398789168a64aeaad6157ac9570232a3.exe
Resource
win10v2004-20221111-en
General
-
Target
85f7788b4acbd901137d9ad779491ca0398789168a64aeaad6157ac9570232a3
-
Size
168KB
-
MD5
84c0d017e76e74ccd65195343aac0c18
-
SHA1
b039c32c7fe93ee3959a6e99dedc527c12827508
-
SHA256
85f7788b4acbd901137d9ad779491ca0398789168a64aeaad6157ac9570232a3
-
SHA512
c63265e4af6804438b2107ac0812b4dfd0ffe0e92cf97cafecd40af5c957d64789ede9b3fc8bb5e9f5057b397f2a185d6ea08214b91c3f748469010c69a548af
-
SSDEEP
3072:EBtbV22fwKbBUUx/OjVP+ZYoQldgDUOx3/VV416LFAjjH:EBtM2fwAr8jVHGg4LFkjH
Malware Config
Signatures
Files
-
85f7788b4acbd901137d9ad779491ca0398789168a64aeaad6157ac9570232a3.exe windows x86
e989e3f318b0ddb1ea1ae8bf3a9d5166
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CloseHandle
LoadLibraryA
GetCurrentProcess
CreateFileA
ExitProcess
user32
wsprintfA
CharLowerBuffA
CreateWindowExA
CloseWindow
SetWindowLongA
advapi32
RegDeleteValueA
RegEnumValueA
RegOpenKeyA
RegCloseKey
RegQueryValueA
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegEnumKeyA
Sections
.text Size: 150KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ