Static task
static1
Behavioral task
behavioral1
Sample
b87ccd78a28fd1952a28be9f7863c1cd9dadef57215b2692ff9e58707840ab9e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b87ccd78a28fd1952a28be9f7863c1cd9dadef57215b2692ff9e58707840ab9e.exe
Resource
win10v2004-20220812-en
General
-
Target
b87ccd78a28fd1952a28be9f7863c1cd9dadef57215b2692ff9e58707840ab9e
-
Size
74KB
-
MD5
20fde0e665e1ca064055db66feaad655
-
SHA1
55bd9da6feff3c1755e70eb748bca41db99c2568
-
SHA256
b87ccd78a28fd1952a28be9f7863c1cd9dadef57215b2692ff9e58707840ab9e
-
SHA512
10b58b800a94952f757dcdd1adc55951ad122cd487c8056b2e8a9537e88fa8ea3e8223ff16776a0a7d84242f0fef113472ada59248758f63cc704fc1f77b205e
-
SSDEEP
1536:7Nfz4T03QS/m+Zs1mWUO2N2gBdvKv79ukpcQiEoI5Q5:7yPqmTmWUO29hUJukpcEoD
Malware Config
Signatures
Files
-
b87ccd78a28fd1952a28be9f7863c1cd9dadef57215b2692ff9e58707840ab9e.exe windows x86
45287395e19343ca075d029784aa7ca1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateConsoleScreenBuffer
DeleteFileA
DisableThreadLibraryCalls
ExitProcess
GetACP
GetCommandLineA
GetCurrentProcessId
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetStdHandle
GetVersionExA
HeapAlloc
HeapCreate
HeapReAlloc
InterlockedDecrement
IsDebuggerPresent
IsValidCodePage
LCMapStringW
MultiByteToWideChar
RtlUnwind
SetConsoleCtrlHandler
SetErrorMode
SetLastError
SetPriorityClass
SetStdHandle
SetUnhandledExceptionFilter
TlsFree
VirtualQueryEx
lstrcpynA
lstrlenA
user32
DialogBoxIndirectParamA
EnumChildWindows
GetMenuItemID
GetPropA
LoadAcceleratorsA
LoadCursorA
SetDlgItemTextA
SetTimer
SetUserObjectSecurity
TrackPopupMenuEx
advapi32
RegSetValueExA
RegRestoreKeyW
ReadEncryptedFileRaw
LsaGetUserName
GetTrusteeNameA
FreeSid
CryptReleaseContext
AccessCheckByTypeResultListAndAuditAlarmByHandleW
AccessCheckAndAuditAlarmA
olepro32
OleLoadPicture
OleIconToCursor
OleCreateFontIndirect
oleacc
GetRoleTextA
AccessibleObjectFromPoint
CreateStdAccessibleProxyW
ObjectFromLresult
GetStateTextW
GetRoleTextW
AccessibleChildren
security
ImpersonateSecurityContext
ExportSecurityContext
comctl32
CreatePropertySheetPageA
PropertySheetW
MenuHelp
InitializeFlatSB
ImageList_SetFlags
ImageList_SetFilter
ImageList_SetDragCursorImage
ImageList_Read
ImageList_LoadImageA
ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_GetBkColor
ImageList_Draw
ImageList_DragShowNolock
ImageList_DragMove
ImageList_Copy
ImageList_AddMasked
GetEffectiveClientRect
FlatSB_SetScrollProp
FlatSB_SetScrollInfo
FlatSB_GetScrollRange
FlatSB_EnableScrollBar
DrawStatusTextA
CreateUpDownControl
CreateStatusWindowA
CreatePropertySheetPageW
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ