Static task
static1
Behavioral task
behavioral1
Sample
b85982e962dd749acc2b14324d5b23f721d2c6ccb38c44501ddeb80264e34dbb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b85982e962dd749acc2b14324d5b23f721d2c6ccb38c44501ddeb80264e34dbb.exe
Resource
win10v2004-20221111-en
General
-
Target
b85982e962dd749acc2b14324d5b23f721d2c6ccb38c44501ddeb80264e34dbb
-
Size
156KB
-
MD5
af599406b7cf82cc1c61ae29590f3326
-
SHA1
04430adf55ba74919e7a43f5b9f2002b3a59cf25
-
SHA256
b85982e962dd749acc2b14324d5b23f721d2c6ccb38c44501ddeb80264e34dbb
-
SHA512
eb3c029eb26ad17d947f0aace23889d18742001eaf7655be48097282c62b25d41436500c5a84bde1fbe5bfbfcaaf31acdc0b5825f27e687ffcca3dd413e4b387
-
SSDEEP
3072:fh9br91m7+aejY52SruImriDnIwJ15e+wOOGyZ3Rwn8fDwuH+dysOX206:TV1cGquenRL0OQa8fnH+U+
Malware Config
Signatures
Files
-
b85982e962dd749acc2b14324d5b23f721d2c6ccb38c44501ddeb80264e34dbb.exe windows x86
eb81c95196ad1dcf2cc0d8bbf756161c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
GetCommandLineA
RtlUnwind
GlobalFlags
GetModuleHandleExW
GetEnvironmentStringsW
GetProcessVersion
GetProcAddress
SetLastError
GetLastError
FreeLibrary
lstrcmpiA
lstrlenA
GetModuleHandleA
GetVersion
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetEnvironmentVariableA
LocalFree
GetVersionExA
FreeEnvironmentStringsW
LoadLibraryA
shell32
ShellExecuteExW
shlwapi
SHDeleteKeyW
PathCombineW
ole32
OleInitialize
CoQueryProxyBlanket
OleInitialize
OleUninitialize
Sections
.text Size: 58KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 338B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ