Static task
static1
Behavioral task
behavioral1
Sample
86775b5cb9205e7ea6b088cd847292e52b52ab01c5fb095335e0e8e20baf368f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
86775b5cb9205e7ea6b088cd847292e52b52ab01c5fb095335e0e8e20baf368f.exe
Resource
win10v2004-20220901-en
General
-
Target
86775b5cb9205e7ea6b088cd847292e52b52ab01c5fb095335e0e8e20baf368f
-
Size
775KB
-
MD5
0cfb8b9d52b4e42db774ed3d9068d778
-
SHA1
08fbeb5c4b6fe28619ae15b1f144dd479bbca699
-
SHA256
86775b5cb9205e7ea6b088cd847292e52b52ab01c5fb095335e0e8e20baf368f
-
SHA512
a9692d04150e82fd134d4deefdffb8479a56364315f3e42d7e72d6416020d7b933a866593d9ccc3980dcbcf1724a11cdf8a8bebd089a29123eb663613f7d196f
-
SSDEEP
24576:HKITml96saLyzT/2OWzbDB1eDv7XPkKm+oVg:q646saLyzTIBgDv7cKmHV
Malware Config
Signatures
Files
-
86775b5cb9205e7ea6b088cd847292e52b52ab01c5fb095335e0e8e20baf368f.exe windows x86
f6025aaea9fe6be861c7cfc991498664
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsDebuggerPresent
CopyFileW
WriteConsoleW
WriteConsoleW
DisconnectNamedPipe
GetModuleHandleA
SetEvent
GetPriorityClass
CreatePipe
GetCurrentDirectoryA
lstrlenW
CloseHandle
GetStdHandle
GetFileAttributesA
WriteConsoleW
ReleaseMutex
GetLastError
ClearCommBreak
GetStartupInfoA
HeapCreate
lstrcpyW
msftedit
RichEditWndProc
RichComboBoxWndProc
RichListBoxWndProc
SetCustomTextOutHandlerEx
shell32
DragQueryFileA
StrChrA
SHGetDiskFreeSpaceA
SHGetMalloc
ShellAboutA
DragFinish
DuplicateIcon
SHFree
DragAcceptFiles
DllUnregisterServer
ShellMessageBoxA
ExtractIconA
SHGetSettings
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 766KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ