Static task
static1
Behavioral task
behavioral1
Sample
a87bc6af97b92151bd10a375c5401b308b27145b19b2b834dfb20b7ec3d6ceb0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a87bc6af97b92151bd10a375c5401b308b27145b19b2b834dfb20b7ec3d6ceb0.exe
Resource
win10v2004-20220812-en
General
-
Target
a87bc6af97b92151bd10a375c5401b308b27145b19b2b834dfb20b7ec3d6ceb0
-
Size
797KB
-
MD5
9319a57f1387fb5f313a7abf10eb184a
-
SHA1
9a0af3563f40e1bcd3c768d26fcba741773eab0c
-
SHA256
a87bc6af97b92151bd10a375c5401b308b27145b19b2b834dfb20b7ec3d6ceb0
-
SHA512
4344d3c3d0b94c4eeb2fb60e2c8c1a3b1c5a3f278f6db5190688c8dfa185b5caf696937699099ba45261c972cbf93e4de7acd59e79fdebeef2ff8abd221abba3
-
SSDEEP
24576:wt9kJXqwPdkBgayCLqDYIMA6gT31krX5vJWb:hqwPdkBgrCWDGHgT3Kr9JWb
Malware Config
Signatures
Files
-
a87bc6af97b92151bd10a375c5401b308b27145b19b2b834dfb20b7ec3d6ceb0.exe windows x86
ba71f432aedc9a66a5f6c3ed39e6987e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetLastError
VirtualProtect
GetFileAttributesA
CreateMailslotW
GetLocaleInfoA
GetExitCodeThread
FindResourceA
CancelIo
MapViewOfFile
GetDriveTypeW
RemoveDirectoryA
GetModuleHandleA
FindClose
GetTickCount
HeapSize
ResetEvent
CreateDirectoryA
GetProcessHeap
GetFileAttributesA
IsValidCodePage
IsBadWritePtr
user32
LoadImageW
GetWindowTextW
IsDialogMessageA
wsprintfA
PeekMessageA
SetFocus
IsWindow
PostMessageW
GetCapture
LoadCursorA
GetWindowLongW
DispatchMessageA
SetCursor
ipsmsnap
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE