Static task
static1
Behavioral task
behavioral1
Sample
87d11264ff940f257f07ad04c13db3c6f5d0dc2bef7db8d495f60fd5bb94e284.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
87d11264ff940f257f07ad04c13db3c6f5d0dc2bef7db8d495f60fd5bb94e284.exe
Resource
win10v2004-20220901-en
General
-
Target
87d11264ff940f257f07ad04c13db3c6f5d0dc2bef7db8d495f60fd5bb94e284
-
Size
280KB
-
MD5
468d3863c4369554758b68cf8d4661f0
-
SHA1
60adf9fcced56a0bc28e6a5ecc4e1225a3c85924
-
SHA256
87d11264ff940f257f07ad04c13db3c6f5d0dc2bef7db8d495f60fd5bb94e284
-
SHA512
11a3f00bbf5b273fc0d6657ae6f5ba9e21b8cef05553356a304ed3539a3d75fdb24f6e72c93712624983300db603dc2cf038f2a26940d2cd3d9a4f0d7c338bb6
-
SSDEEP
6144:5hvFQDcPJraFMmcfHLBftWq7+P6RIJ+WQ3b2ueA/U:XNQDyJkoHkMIIz3b2+/U
Malware Config
Signatures
Files
-
87d11264ff940f257f07ad04c13db3c6f5d0dc2bef7db8d495f60fd5bb94e284.exe windows x86
067aa9d4b4ac68968834f22e0e3ce64d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
SetLastError
GetSystemTimeAsFileTime
GetUserDefaultLCID
SystemTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetLocalTime
CloseHandle
LoadLibraryW
GlobalFindAtomA
lstrcmpA
lstrcpyW
GlobalAlloc
HeapAlloc
QueryPerformanceCounter
GetCurrentProcessId
lstrlenW
FindResourceW
GetCurrentProcess
CreateFileA
GetTickCount
HeapFree
olecli32
LeSaveToStream
LeSetData
LeQueryOutOfDate
LeObjectConvert
LeObjectLong
LeGetUpdateOptions
LeReconnect
LeSetBounds
LeQueryOpen
LeRelease
LeQueryBounds
psapi
EnumPageFilesA
EnumPageFilesW
GetProcessImageFileNameA
EnumProcessModules
GetPerformanceInfo
EmptyWorkingSet
Sections
.text Size: 243KB - Virtual size: 243KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ