Static task
static1
Behavioral task
behavioral1
Sample
85ed317fb75595708ddc21196f6d3912fdc80256a114a838021b401f60e031af.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
85ed317fb75595708ddc21196f6d3912fdc80256a114a838021b401f60e031af.exe
Resource
win10v2004-20220812-en
General
-
Target
85ed317fb75595708ddc21196f6d3912fdc80256a114a838021b401f60e031af
-
Size
212KB
-
MD5
c6fe0e49cdd409305d370b68e18f658a
-
SHA1
d8ef11000671d4a932659954dbe7a29241da4275
-
SHA256
85ed317fb75595708ddc21196f6d3912fdc80256a114a838021b401f60e031af
-
SHA512
ae1fd062fe6dd95a94314c016720db5be2cc5a6bd1def288672c7838feb9844aacfab91346d7061c64829490fc5e041874a616653543ff007797c82275d27cd3
-
SSDEEP
6144:9LUQO61ipP4hEjmmMshNIzcg7Zd9aooCh:NOMk4Ejmm5w4o
Malware Config
Signatures
Files
-
85ed317fb75595708ddc21196f6d3912fdc80256a114a838021b401f60e031af.exe windows x86
13ecfa07f06fcfdaea738423db8acca1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
SetFilePointer
ReadFile
ExpandEnvironmentStringsA
HeapCreate
GetStdHandle
GetCommandLineA
OpenEventA
HeapAlloc
GetCPInfo
lstrlenA
SizeofResource
ResetEvent
GetThreadContext
ExitProcess
lstrcpyA
GetConsoleMode
EnterCriticalSection
ExitThread
GetProcessAffinityMask
PulseEvent
GetCurrentProcessId
GetStartupInfoA
IsDebuggerPresent
InterlockedExchange
GetDateFormatA
GetConsoleCP
FreeEnvironmentStringsA
TlsFree
IsBadReadPtr
LCMapStringA
InitializeCriticalSection
LeaveCriticalSection
CreateProcessA
GetDriveTypeA
Module32Next
WaitForSingleObject
Sleep
TerminateThread
MulDiv
WaitForMultipleObjects
SearchPathA
LocalAlloc
RaiseException
SetPriorityClass
MapViewOfFile
GetEnvironmentVariableA
GlobalUnlock
HeapFree
GetVersionExA
VirtualFree
DeviceIoControl
GetEnvironmentStrings
IsBadStringPtrA
GetProcessWorkingSetSize
TlsSetValue
FindFirstFileA
GetStringTypeW
FormatMessageA
LockResource
GetTickCount
CreateFileMappingA
SetStdHandle
GetVersion
TerminateProcess
QueryPerformanceCounter
DeleteCriticalSection
GetCurrentProcess
FreeEnvironmentStringsW
GetModuleHandleW
DuplicateHandle
GetModuleFileNameA
LCMapStringW
GetNumberFormatA
InterlockedIncrement
lstrcmpA
lstrcmpiA
GlobalAddAtomA
FindClose
CreateEventA
CreateToolhelp32Snapshot
SetErrorMode
SetUnhandledExceptionFilter
VirtualQueryEx
QueryPerformanceFrequency
lstrlenW
FreeLibrary
LocalFree
ReadProcessMemory
GlobalLock
CloseHandle
FlushFileBuffers
GetModuleHandleA
GetStringTypeA
GetFileAttributesA
WriteConsoleA
GetProcessHeap
SetProcessWorkingSetSize
FindResourceA
GetTimeFormatA
GetOEMCP
GetLastError
FileTimeToLocalFileTime
user32
GetWindow
DestroyIcon
SendMessageTimeoutA
GetKeyState
UnionRect
GetParent
ExitWindowsEx
TrackPopupMenuEx
GetClientRect
CreateMenu
RegisterClassExA
SetClipboardData
EnableWindow
GetDlgItemTextA
GetClassNameA
CallWindowProcA
DialogBoxIndirectParamA
PostQuitMessage
GetMenuItemCount
DefDlgProcA
DeferWindowPos
SetTimer
GetDlgCtrlID
InflateRect
LoadIconA
AppendMenuA
GetSystemMetrics
UpdateWindow
EnumChildWindows
GetWindowDC
CheckDlgButton
SetClassLongA
MsgWaitForMultipleObjects
KillTimer
CreatePopupMenu
GetDC
DrawFrameControl
GetMenuItemID
DestroyWindow
IsDialogMessageA
IsDlgButtonChecked
GetWindowPlacement
ChildWindowFromPoint
OffsetRect
GetCapture
ModifyMenuA
LoadStringA
SetCursor
BeginDeferWindowPos
GetFocus
GetWindowLongA
LoadCursorA
FrameRect
ClientToScreen
DefFrameProcA
LoadAcceleratorsA
IsIconic
DeleteMenu
RedrawWindow
GetSubMenu
SetCapture
wsprintfA
GetDesktopWindow
CheckMenuItem
PeekMessageA
EndDeferWindowPos
InvalidateRect
EndDialog
IsZoomed
RegisterWindowMessageA
DrawEdge
GetMessageA
CreateWindowExA
CheckMenuRadioItem
EmptyClipboard
EndPaint
SetWindowPlacement
EnableMenuItem
GetSysColorBrush
SetPropA
FindWindowA
PostMessageA
MessageBoxA
RemoveMenu
IsWindowVisible
SetUserObjectSecurity
SetFocus
DrawTextA
GetDoubleClickTime
ShowWindowAsync
GetUpdateRgn
ReleaseCapture
InsertMenuA
SetWindowTextA
CheckRadioButton
EnumWindows
CreateIconIndirect
TranslateMessage
TrackPopupMenu
DialogBoxParamA
GetScrollInfo
SetMenuItemInfoA
IntersectRect
SetDlgItemTextA
PtInRect
msvcrt
__p__commode
__setusermatherr
__p__fmode
_except_handler3
_adjust_fdiv
_controlfp
_acmdln
_exit
__set_app_type
__getmainargs
_initterm
exit
memcpy
_XcptFilter
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ