Static task
static1
Behavioral task
behavioral1
Sample
85d12b26a3419b93f1fc7a21f29612b3c697d1979e2097b06031944d9539bab8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
85d12b26a3419b93f1fc7a21f29612b3c697d1979e2097b06031944d9539bab8.exe
Resource
win10v2004-20220901-en
General
-
Target
85d12b26a3419b93f1fc7a21f29612b3c697d1979e2097b06031944d9539bab8
-
Size
240KB
-
MD5
f0343e6788a3d48d0f94453920b13121
-
SHA1
6fcf9d87d49c3889ea601ca4effaf993a0031fa9
-
SHA256
85d12b26a3419b93f1fc7a21f29612b3c697d1979e2097b06031944d9539bab8
-
SHA512
159c7051ff99d18ddae541330b59f4f7b2c5a0a1fc7ee6ec6c704f7e84364af972f037cf7cf58e86f313cb9eb3f445e296c28603c6aa80b41c8f96153322b02c
-
SSDEEP
6144:zAFw3vEHxBakLoxI5+N9er44MOhUFK0A3uLQw/D:c20KI5+6r44McD3kR
Malware Config
Signatures
Files
-
85d12b26a3419b93f1fc7a21f29612b3c697d1979e2097b06031944d9539bab8.exe windows x86
7861463e1b66a651c9707067ddd33d34
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleOutputA
GetStdHandle
FindFirstFileExW
GetVolumeInformationA
SearchPathA
PeekConsoleInputA
LZInit
SetComputerNameA
UnregisterWait
GetThreadIOPendingFlag
MoveFileExA
FindFirstVolumeA
IsValidCodePage
HeapFree
DeleteAtom
GlobalMemoryStatus
GetTimeFormatA
_lwrite
_lclose
VirtualAlloc
GetFileAttributesA
GetCurrentThread
FindNextVolumeMountPointW
CreateFileMappingW
SetTimeZoneInformation
user32
LockSetForegroundWindow
DlgDirSelectComboBoxExA
MapVirtualKeyExW
SetClipboardData
AdjustWindowRectEx
ToAscii
GetKBCodePage
GetMenuInfo
RegisterClipboardFormatA
ScrollChildren
GetMenuState
LoadStringA
ShowCaret
GetMenuBarInfo
SendInput
LoadMenuA
LoadMenuIndirectA
LoadCursorFromFileA
SetClipboardViewer
DrawStateA
EnumChildWindows
SetDebugErrorLevel
CountClipboardFormats
OemToCharBuffA
GetAsyncKeyState
IsCharLowerA
IsCharLowerA
shell32
DragFinish
DragAcceptFiles
opengl32
glColorMaterial
d3d8
Direct3DCreate8
avifil32
AVIBuildFilter
msvfw32
VideoForWindowsVersion
Sections
.text Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DATA Size: 79KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE