Static task
static1
Behavioral task
behavioral1
Sample
87994355a53615d34c18e787fde8f890a6cf110494cde07f7d5c4123bbaca29d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
87994355a53615d34c18e787fde8f890a6cf110494cde07f7d5c4123bbaca29d.exe
Resource
win10v2004-20220901-en
General
-
Target
87994355a53615d34c18e787fde8f890a6cf110494cde07f7d5c4123bbaca29d
-
Size
448KB
-
MD5
6583b906d430d7cfa0672729c3b2b0a0
-
SHA1
244a159728f3a5ef54cef0b7254edf6a609ce11c
-
SHA256
87994355a53615d34c18e787fde8f890a6cf110494cde07f7d5c4123bbaca29d
-
SHA512
c95670e1ee91070faba50788651e3a60d26105b1aa14f665251a0fca1fec956f434d3f341bfba815cc87656209f5fae2e82ba05d1a8e4f0dc472e8eff37939c1
-
SSDEEP
12288:0PBWU6sDxbTblaQIFidm55wRW4eWjxC6j+:05WU6s9b1aQIFQm55wRx9k
Malware Config
Signatures
Files
-
87994355a53615d34c18e787fde8f890a6cf110494cde07f7d5c4123bbaca29d.exe windows x86
5aafabc36a8571930de92b8c3d32f3c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoRegisterInitializeSpy
kernel32
GetSystemDefaultUILanguage
GetCurrentProcess
Heap32First
ntdll
RtlGetCurrentPeb
NtReadFileScatter
user32
GetForegroundWindow
Sections
.text Size: 441KB - Virtual size: 444KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 197B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE