Static task
static1
Behavioral task
behavioral1
Sample
a87614afbf1ce0bd156947409ed7bda8b787b07345c27d15719f42a4ce03c609.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a87614afbf1ce0bd156947409ed7bda8b787b07345c27d15719f42a4ce03c609.exe
Resource
win10v2004-20220812-en
General
-
Target
a87614afbf1ce0bd156947409ed7bda8b787b07345c27d15719f42a4ce03c609
-
Size
747KB
-
MD5
fd605ec6403be0e5bbfc9b6cff8ef712
-
SHA1
2a8d8d2f78c47cba86ae71ca84db5267aa3178cf
-
SHA256
a87614afbf1ce0bd156947409ed7bda8b787b07345c27d15719f42a4ce03c609
-
SHA512
78ac50d77adb27e423f3486346e21c2c955cbba6a5ae8e95f72861d42c81cd583ae847ddc74b5fb6ab3ebfcd19d699206d0d820e1450aaac792076f39f5feefb
-
SSDEEP
12288:v4ZO5qqpp9PXQBSNi3apztJn2WEVDZF/wTM76NAzI+52Y8zbqst9pDW:v4YQqLxXiamapaL/wTM7VIszY
Malware Config
Signatures
Files
-
a87614afbf1ce0bd156947409ed7bda8b787b07345c27d15719f42a4ce03c609.exe windows x86
f7cdde9360fd776e9d5bb96e2df16875
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
CloseHandle
GetConsoleTitleA
SetLastError
VirtualAlloc
OpenProcess
CreateMutexA
GetStdHandle
RemoveDirectoryA
SetEvent
DeleteFileA
CreatePipe
GetEnvironmentVariableW
HeapSize
GetCommandLineW
FindClose
GetTickCount
GetStartupInfoW
GetModuleHandleA
ResetEvent
ExitProcess
WaitForSingleObject
GetFileAttributesA
WaitForMultipleObjects
GetCurrentDirectoryA
user32
FillRect
DispatchMessageW
GetClassInfoA
GetDC
GetDC
GetSysColor
PeekMessageA
CallWindowProcW
FindWindowW
GetDC
MessageBoxA
GetWindowLongA
DispatchMessageW
perfctrs
CloseNbfPerformanceData
CloseNbfPerformanceData
CloseNbfPerformanceData
CloseNbfPerformanceData
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 741KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ