Static task
static1
Behavioral task
behavioral1
Sample
870852c28cede3cb6e0a321561b8de0dc8d007115bae4908b78a25675f4d0d4f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
870852c28cede3cb6e0a321561b8de0dc8d007115bae4908b78a25675f4d0d4f.exe
Resource
win10v2004-20220812-en
General
-
Target
870852c28cede3cb6e0a321561b8de0dc8d007115bae4908b78a25675f4d0d4f
-
Size
799KB
-
MD5
6eb14e223ddfee1b5d2f737465508900
-
SHA1
260eb92ecb2a0a53e274d98b62fbb0bb18cbeebf
-
SHA256
870852c28cede3cb6e0a321561b8de0dc8d007115bae4908b78a25675f4d0d4f
-
SHA512
7a28b47de1a2524be6a22a6d143c422f6a4bcbdb2e6b44d4d757942c459f4ddc8aae65c55a661bf60d1db47884a2c77c4f4e606ef5990506fbc72f832d026e55
-
SSDEEP
24576:zRQUaKqJ/WP6oGny9T4Kl9JjWCL4ChMkhxKF7Ygr2N:tXHPDGny1BpPLLhHh
Malware Config
Signatures
Files
-
870852c28cede3cb6e0a321561b8de0dc8d007115bae4908b78a25675f4d0d4f.exe windows x86
a1c4cb7ad9fc5876f88b514b6057aea2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetFilePointer
IsValidLocale
CreateDirectoryA
CreateMutexW
GetLocaleInfoA
GetStdHandle
CreateFileW
VirtualProtect
InterlockedExchange
AddAtomW
GetVersionExA
SuspendThread
GetCurrentThreadId
GetTickCount
ResumeThread
LeaveCriticalSection
lstrlenA
GetModuleFileNameA
CreateFileW
LocalFlags
GetModuleHandleA
OpenEventW
HeapDestroy
SetEvent
GetFileAttributesW
user32
GetWindowLongA
GetWindowLongA
IsMenu
wsprintfA
LoadCursorA
SetRect
MessageBoxW
GetWindowTextA
PeekMessageA
DestroyMenu
DestroyIcon
IsMenu
DispatchMessageA
dpnet
DllUnregisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
advapi32
IsValidAcl
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 793KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE