Static task
static1
Behavioral task
behavioral1
Sample
87313dc667f57b025aa07841fe6907c79490958c4bdb197eef63673142d2be24.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
87313dc667f57b025aa07841fe6907c79490958c4bdb197eef63673142d2be24.exe
Resource
win10v2004-20220812-en
General
-
Target
87313dc667f57b025aa07841fe6907c79490958c4bdb197eef63673142d2be24
-
Size
102KB
-
MD5
6c30c842afed2e2052047255e0d106cf
-
SHA1
d557e89f2d61970841d54d5b90349921a0605031
-
SHA256
87313dc667f57b025aa07841fe6907c79490958c4bdb197eef63673142d2be24
-
SHA512
ce3e345e92867801a2eb92ec2caa7e75e43d16e26fe2cef6f3b9637b145d12864864969637f3e720592cf074bd91ef56476a767a8f6d7641667d82596eff76a7
-
SSDEEP
768:AEcGb3s3uE5z+m974XagWOFZsbDMn0IePgmtJ85cdY/MWDzNeaP:AEcGgjn74X2OF7ePjtJ85c0MWDzv
Malware Config
Signatures
Files
-
87313dc667f57b025aa07841fe6907c79490958c4bdb197eef63673142d2be24.exe windows x64
12f675103c6c3b7787d56510d22b5495
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
VirtualProtect
RtlAddFunctionTable
CreateFileW
GetModuleHandleA
CloseHandle
GetProcAddress
GetFileSize
VirtualFree
VirtualAlloc
ReadFile
GetModuleFileNameW
GetFileAttributesW
ExitProcess
GetStartupInfoW
GetCommandLineW
LoadLibraryA
GetModuleHandleW
user32
DefWindowProcW
MessageBoxW
ntdll
wcscat_s
comctl32
InitCommonControlsEx
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code0 Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ