Static task
static1
Behavioral task
behavioral1
Sample
f87853fc852df52ece10da7df4b6a64e2201b32917b3c00fe42d2f50d9ec1529.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f87853fc852df52ece10da7df4b6a64e2201b32917b3c00fe42d2f50d9ec1529.exe
Resource
win10v2004-20221111-en
General
-
Target
f87853fc852df52ece10da7df4b6a64e2201b32917b3c00fe42d2f50d9ec1529
-
Size
41KB
-
MD5
2fc14a2d7eff497e28e2d1811e12a450
-
SHA1
6c010195efcbf329d581b5c6dfa913ab1206c6bf
-
SHA256
f87853fc852df52ece10da7df4b6a64e2201b32917b3c00fe42d2f50d9ec1529
-
SHA512
1cb268244d4b1b8fbab5b917d4f786535478508a3d308052f992870039b0a88a6ce66891bb07e22bfc2b1b44706c3608c33059643ac3b083910ae778ad944374
-
SSDEEP
768:4bYbK0ys3X0H4CAzQ0kPiCAaJ2Lfyd/RayWrA2ajFa2YbTaEj2UvkRwc:9ys3AJcgUfARtWrA2k+bTyZRwc
Malware Config
Signatures
Files
-
f87853fc852df52ece10da7df4b6a64e2201b32917b3c00fe42d2f50d9ec1529.exe windows x86
384460cb29f87431d38022ca83ad62ec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentProcess
OpenProcess
DuplicateHandle
SetEvent
GetCurrentProcessId
LocalReAlloc
CloseHandle
CreateEventA
lstrcmpiA
GetCurrentThreadId
ExitProcess
GetCommandLineA
GetModuleFileNameA
lstrlenA
LocalAlloc
GetLastError
LocalFree
InterlockedDecrement
InterlockedIncrement
ResumeThread
CreateThread
user32
PostThreadMessageA
GetMessageA
CharNextA
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA
advapi32
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExA
RegDeleteKeyA
ole32
CoGetInterfaceAndReleaseStream
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoRegisterClassObject
CoRevokeClassObject
CoUninitialize
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 61B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iiqhiyv Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE