Static task
static1
Behavioral task
behavioral1
Sample
87f612833fd568375feb920649e57858b9fb4e1449ae6f25c71889d90a848e4c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
87f612833fd568375feb920649e57858b9fb4e1449ae6f25c71889d90a848e4c.exe
Resource
win10v2004-20220812-en
General
-
Target
87f612833fd568375feb920649e57858b9fb4e1449ae6f25c71889d90a848e4c
-
Size
209KB
-
MD5
93af28d3ee4c2b091a43cf7810c884a0
-
SHA1
432b4c60306889d03943361a00b795d082078fe5
-
SHA256
87f612833fd568375feb920649e57858b9fb4e1449ae6f25c71889d90a848e4c
-
SHA512
7b17977f733ea4f8e9ffb516c9cd62401be4623ab150511b66a9e1f76fc23ca7df945dc8372dd669e4ffdffb35a0a0ab2e47fe279735fc013ae6e337d6a5a56e
-
SSDEEP
3072:xbPGa0deymoAyg/IHCDYxUWJJAH86pSIkX7NRMOFG9cLFCus8hb5ucOwoEOjU8pZ:s/gKRnwH8ASIkX7FmkK8hV4UgYdbBbs
Malware Config
Signatures
Files
-
87f612833fd568375feb920649e57858b9fb4e1449ae6f25c71889d90a848e4c.exe windows x86
a44019f70ce6a4563c786e9cc301fed8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
SetLastError
SetUnhandledExceptionFilter
CloseHandle
LockResource
QueryDosDeviceA
CreateFileA
HeapAlloc
MultiByteToWideChar
GetLocalTime
GetCurrentProcess
GetStartupInfoA
GetVolumeInformationA
QueryPerformanceCounter
LoadLibraryW
SystemTimeToFileTime
GetSystemTimeAsFileTime
HeapFree
FindResourceA
LoadResource
GetProcessHeap
lstrcpyA
DeviceIoControl
lstrcmpA
GetCurrentProcessId
GetCurrentThreadId
WideCharToMultiByte
FreeResource
GetTickCount
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyW
RegOpenKeyExA
RegQueryValueExW
pautoenr
CertAutoRemove
CertAutoEnrollment
user32
CharNextA
wsprintfA
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ