Static task
static1
Behavioral task
behavioral1
Sample
Diablo II.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Diablo II.exe
Resource
win10v2004-20220901-en
General
-
Target
Diablo II.exe
-
Size
44KB
-
MD5
01142d4d84739dde052eb75bc4e5e62c
-
SHA1
60a8a2b4b039ca4bb666278e373750ad9abe3df3
-
SHA256
f9d04f91090818107751a7dedcc1dc6e66c42d4a415256bef35806ca5995447d
-
SHA512
1aae8455d440e6c214585be7cc0fb836c8537863496425d3dc8c90bd2806ff6e8835d8f18c4c6879abc58db0d9cee392721e30f67a66a27ef0d0ba22e38fae70
-
SSDEEP
384:h/VidK4rfRTxGfyzm5vTqfICkhNaLPjerpY9myGZDPJUF6oaSTfS7LDe:h/VidKwfRTxGX5GPKadmXD2F6oaSuXy
Malware Config
Signatures
Files
-
Diablo II.exe.exe windows x86
Password: xdx
67aa044bf7bfe813f858f1bbccd2d8d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
GetExitCodeProcess
WaitForMultipleObjects
CreateProcessA
GetCommandLineA
GetLastError
CreateEventA
GetStdHandle
GetFileType
GetProcAddress
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
CloseHandle
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
LoadLibraryA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapAlloc
VirtualAlloc
HeapReAlloc
user32
MessageBoxA
LoadStringA
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ