Static task
static1
Behavioral task
behavioral1
Sample
871a0890cce9b821f44a5019f652f10f8918abfa6f5aa46b2b8e6f5984981b85.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
871a0890cce9b821f44a5019f652f10f8918abfa6f5aa46b2b8e6f5984981b85.exe
Resource
win10v2004-20220901-en
General
-
Target
871a0890cce9b821f44a5019f652f10f8918abfa6f5aa46b2b8e6f5984981b85
-
Size
43KB
-
MD5
90c30a2e9f88bb41e24647452d77c553
-
SHA1
f9754fb3aad20417878b014322408c0e36db199c
-
SHA256
871a0890cce9b821f44a5019f652f10f8918abfa6f5aa46b2b8e6f5984981b85
-
SHA512
55d2b777b0d094c2d7ca14e6e7b6f3af902f6e9bdb8346c50284b6925105b8aeeb957923a220936e4938ecd23ace1d4078b78d7c01c3cde1baa4095b0c49cb11
-
SSDEEP
768:RDbwpRtUHq/7560Gzt7FtU32FW2XjvUCkCec4XCDdtV:Vbw/trREba8W27UC8c4yH
Malware Config
Signatures
Files
-
871a0890cce9b821f44a5019f652f10f8918abfa6f5aa46b2b8e6f5984981b85.exe windows x86
263de9ac5604e757fa8d7e2c9c0aff1f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
TlsGetValue
GlobalFlags
lstrlenA
VirtualQuery
GetConsoleTitleA
CloseHandle
GetStartupInfoA
HeapCreate
GetCommandLineA
EnumResourceTypesA
GetDriveTypeW
SetLastError
CloseHandle
GetTimeFormatW
CreateEventW
GetEnvironmentVariableA
GetModuleHandleA
GetFileAttributesA
GetCommandLineA
advapi32
InitializeSid
RegQueryValueW
IsValidSid
CreateProcessAsUserA
IsValidSid
IsValidSecurityDescriptor
IsValidSid
RegEnumKeyA
RegCreateKeyExW
IsValidAcl
IsValidSid
IsValidSid
RegDeleteValueA
asycfilt
FilterCreateInstance
FilterCreateInstance
FilterCreateInstance
FilterCreateInstance
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE