Static task
static1
Behavioral task
behavioral1
Sample
b87c1be1dd90d9ae8e7b04c87a6ab0a2b706ded02e2f4c3db45db1bed9d46642.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b87c1be1dd90d9ae8e7b04c87a6ab0a2b706ded02e2f4c3db45db1bed9d46642.exe
Resource
win10v2004-20220901-en
General
-
Target
b87c1be1dd90d9ae8e7b04c87a6ab0a2b706ded02e2f4c3db45db1bed9d46642
-
Size
104KB
-
MD5
93a104caf7b01de69614498de5cf870a
-
SHA1
656ade98396bc2f671ad7344d179b791b2bece05
-
SHA256
b87c1be1dd90d9ae8e7b04c87a6ab0a2b706ded02e2f4c3db45db1bed9d46642
-
SHA512
303f9ffcbfefdae1d647cbca3e83601278461539af112ed0bbe22382a3fa2aa5b6bdb3f63a324c52daeac279d8eb111857e748bde5cd15c4e7d7aa063a8add26
-
SSDEEP
1536:iIEtYUlFEaIoeMwGOGlxKB8h+FBQS8//VtrVk6tnPYHezs:P+bEJovdlxI8h+Q//V3K+zs
Malware Config
Signatures
Files
-
b87c1be1dd90d9ae8e7b04c87a6ab0a2b706ded02e2f4c3db45db1bed9d46642.exe windows x86
c7d82948ac5b2ce76830a2add5807aaa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDateFormatA
GetTimeFormatA
MulDiv
lstrcpyA
WriteFile
CreateFileA
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
lstrcatA
DisableThreadLibraryCalls
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LocalAlloc
LocalFree
GetProcAddress
SetErrorMode
GetSystemDirectoryA
LoadLibraryExA
GetFileAttributesA
FindResourceA
LoadResource
LockResource
FreeResource
CreateDirectoryA
lstrlenA
lstrcpynA
CreateEventA
CreateThread
CloseHandle
SetEvent
FreeLibraryAndExitThread
GetSystemTimeAsFileTime
WaitForSingleObject
user32
wsprintfA
advapi32
RegOpenKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegFlushKey
RegCreateKeyA
msvcrt
malloc
free
Sections
.text Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ