Static task
static1
Behavioral task
behavioral1
Sample
85ea93218967d8f9e9ea323e31c328c1dfb9ee31ca5e91733e48917b8e0c1d00.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
85ea93218967d8f9e9ea323e31c328c1dfb9ee31ca5e91733e48917b8e0c1d00.exe
Resource
win10v2004-20220901-en
General
-
Target
85ea93218967d8f9e9ea323e31c328c1dfb9ee31ca5e91733e48917b8e0c1d00
-
Size
32KB
-
MD5
9c8cfd9f319d01caf4f94a74041719c4
-
SHA1
1803e894520a4b0f0eff815359ab940fe9887a39
-
SHA256
85ea93218967d8f9e9ea323e31c328c1dfb9ee31ca5e91733e48917b8e0c1d00
-
SHA512
db1a93633bbcca991bbd647866b59f31b19a371964fd7898b6562126dc26576a756a7423e1db5b9098147615b1530f8d0c02a0b8b8614b50eb6904d9ab19d49d
-
SSDEEP
384:3n4ikl4m5L4Tq6SKnpQfBxZwj3pSknmlP4Q2y2cenWhzFtpkvk97A6mkot:m/+q6fpQ5Twj3pSCtvcrhzFtpkvA7u
Malware Config
Signatures
Files
-
85ea93218967d8f9e9ea323e31c328c1dfb9ee31ca5e91733e48917b8e0c1d00.exe windows x86
5bee8b94668bbc42415e5bf389d4f5a5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileAttributesA
CopyFileA
GetModuleFileNameA
GetSystemTime
TerminateProcess
OpenProcess
lstrcmpA
GetModuleHandleA
ExitProcess
GetLastError
CreateMutexA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
GetProcAddress
Sleep
GetCurrentProcess
LCMapStringA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
CloseHandle
user32
GetWindowTextA
GetWindowThreadProcessId
EnumWindows
advapi32
RegSetValueExA
RegOpenKeyExA
shell32
ShellExecuteA
SHGetFolderPathA
shlwapi
PathAppendA
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE