Static task
static1
Behavioral task
behavioral1
Sample
86924548cc21d87d4106543d8b34425520d2891c46cf3a1cd94f485a4fc38520.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
86924548cc21d87d4106543d8b34425520d2891c46cf3a1cd94f485a4fc38520.exe
Resource
win10v2004-20221111-en
General
-
Target
86924548cc21d87d4106543d8b34425520d2891c46cf3a1cd94f485a4fc38520
-
Size
172KB
-
MD5
c04e50144e0fc4c5d8bc826c5d1f692b
-
SHA1
77cd6d51daa94b8e36d91a6327af62e4174cb2da
-
SHA256
86924548cc21d87d4106543d8b34425520d2891c46cf3a1cd94f485a4fc38520
-
SHA512
7f786eb21e8e9f6ff4726f2b98250597f3bd4a67affedadc163cb8ad78aba49c518b88fe66600195a9b77d6c4ffdeec9950000ba5ebdc4db879420c64924e55d
-
SSDEEP
3072:qWtQoep3dW0/oHbUErOH/3rHqe20lorRLKVTRGU+oavS7mGWfjoeq9:lgdW0QQqEvz20lorxRcavS7iER9
Malware Config
Signatures
Files
-
86924548cc21d87d4106543d8b34425520d2891c46cf3a1cd94f485a4fc38520.exe windows x86
0e8d4dcd993515f58a33ca871dcfdfdf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfoExA
EnumSystemLocalesA
InterlockedDecrement
InitializeCriticalSection
RaiseException
RtlUnwind
WriteConsoleA
HeapSize
InterlockedIncrement
GetVersionExA
CreateFileA
EnterCriticalSection
IsValidCodePage
EnumResourceNamesA
IsValidLocale
Sleep
GetConsoleOutputCP
RaiseException
GetUserDefaultLCID
LeaveCriticalSection
SetStdHandle
GetCurrentThreadId
GetLastError
DeleteCriticalSection
GetLocaleInfoW
WriteConsoleW
ole32
CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID
rpcrt4
RpcBindingFromStringBindingA
RpcStringBindingComposeA
RpcStringFreeA
Sections
.text Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ