Static task
static1
Behavioral task
behavioral1
Sample
f87d9ba93c7e5d67774d1f12f4a13de0c4deeb6e14011e4a13a4884238f42d49.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f87d9ba93c7e5d67774d1f12f4a13de0c4deeb6e14011e4a13a4884238f42d49.exe
Resource
win10v2004-20221111-en
General
-
Target
f87d9ba93c7e5d67774d1f12f4a13de0c4deeb6e14011e4a13a4884238f42d49
-
Size
705KB
-
MD5
41dee7fb1f3ce3692103a8629e32dd1c
-
SHA1
ca32d16f25d67b0bdad471dd1403e0bbfaa9b8de
-
SHA256
f87d9ba93c7e5d67774d1f12f4a13de0c4deeb6e14011e4a13a4884238f42d49
-
SHA512
897d49da919d501619a9c84dfc1cd3004b882555d25bb471bfe7237dbb3a602cc16c02b627457c723044932629c6eef3dfb0f440787e6f15a0a28c97bb6332f7
-
SSDEEP
6144:xZgr5j2aapzl/R21r5CL4Q//N2FiukHTtTqSoUv7RxNzT2H9:XulD+/R21r524TFoAe7RxNX2H9
Malware Config
Signatures
Files
-
f87d9ba93c7e5d67774d1f12f4a13de0c4deeb6e14011e4a13a4884238f42d49.exe windows x86
92331f833780d34774f720d29dfa9144
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_SetOverlayImage
gdi32
GetEnhMetaFileHeader
EnumFontFamiliesExA
CreateRoundRectRgn
GdiComment
ole32
ReadFmtUserTypeStg
CoFreeAllLibraries
kernel32
GetNumberFormatW
EraseTape
WriteFile
CreateMutexW
CompareStringA
SetEndOfFile
SetNamedPipeHandleState
LocalSize
IsProcessorFeaturePresent
SetEnvironmentVariableA
SetEnvironmentVariableW
lstrcpyA
FreeResource
lstrcpynA
IsBadStringPtrA
ReadConsoleInputW
GetDiskFreeSpaceExA
CreateWaitableTimerA
SetConsoleWindowInfo
GetTapeStatus
UnmapViewOfFile
EnumTimeFormatsW
IsDBCSLeadByteEx
Beep
GetDateFormatA
SetCommMask
ExitProcess
oleaut32
SafeArrayGetElement
SetErrorInfo
user32
CheckMenuItem
RegisterClipboardFormatA
PostMessageW
EnumDisplaySettingsExA
EnumThreadWindows
IsWindowEnabled
ws2_32
accept
WSASetServiceW
WSAEnumNameSpaceProvidersA
WSAEnumNetworkEvents
select
WSAAsyncGetServByPort
ioctlsocket
advapi32
RegReplaceKeyW
AddAccessDeniedAce
GetSidIdentifierAuthority
AccessCheckAndAuditAlarmW
GetCurrentHwProfileW
IsTextUnicode
CryptGenRandom
GetSecurityDescriptorControl
SetTokenInformation
Sections
.text Size: 320KB - Virtual size: 319KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 370KB - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ