Static task
static1
Behavioral task
behavioral1
Sample
86ed9a6995ee292deb96d1e951306706b136a8e26db77d6ce60caa85938b7c17.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
86ed9a6995ee292deb96d1e951306706b136a8e26db77d6ce60caa85938b7c17.exe
Resource
win10v2004-20220901-en
General
-
Target
86ed9a6995ee292deb96d1e951306706b136a8e26db77d6ce60caa85938b7c17
-
Size
114KB
-
MD5
0a031b0c9021d1b3b21475870344d3c0
-
SHA1
c88077da6715dc40dba21707201f1b54881db2ed
-
SHA256
86ed9a6995ee292deb96d1e951306706b136a8e26db77d6ce60caa85938b7c17
-
SHA512
0c62a584e11792541361a9bbec1343c5e7914e6067b1ec6a475c694146cd2ca9ff8dd3c88feb171c40f4c4a7193b9a9cab93404013bbf17a5a0db6136aae909f
-
SSDEEP
3072:m7HI1EhwtqRbL2ws+krtztcH15KOPuqmVFk4:m7HI1E2ybi9r8XKBqsFk4
Malware Config
Signatures
Files
-
86ed9a6995ee292deb96d1e951306706b136a8e26db77d6ce60caa85938b7c17.exe windows x86
13e805eaf04b241dc6563d480404e1a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
LoadLibraryExW
lstrlenA
CreateFileW
GetCurrentThreadId
FindResourceW
PulseEvent
HeapCreate
GlobalUnlock
GetCurrentDirectoryA
LocalFree
SetLastError
Sleep
FindClose
GetModuleHandleA
CreateProcessA
GetCommandLineA
lstrcpyA
UnmapViewOfFile
GetComputerNameA
user32
FillRect
GetDlgItem
DispatchMessageA
CheckRadioButton
CallWindowProcA
CreateWindowExA
CreateIcon
DrawEdge
GetCaretPos
IsWindow
DrawMenuBar
GetDC
SetFocus
rsaenh
CPDeriveKey
CPGenKey
CPSignHash
CPDecrypt
CPHashData
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ymstvkw Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE