Static task
static1
Behavioral task
behavioral1
Sample
87e1f348e0a34bd8425f302ca95f7f04b47751714caf40a315330ee1aa5050a8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
87e1f348e0a34bd8425f302ca95f7f04b47751714caf40a315330ee1aa5050a8.exe
Resource
win10v2004-20220812-en
General
-
Target
87e1f348e0a34bd8425f302ca95f7f04b47751714caf40a315330ee1aa5050a8
-
Size
117KB
-
MD5
c38bc1fbfc271f7b5601869d2b7176c3
-
SHA1
a8999371dee3681d1ebed2e8777ebbb1d661bffd
-
SHA256
87e1f348e0a34bd8425f302ca95f7f04b47751714caf40a315330ee1aa5050a8
-
SHA512
18db16924246c749e8dae79fcef3504cf37295031ee4505f40ba08b94bcca196311894881d611257b2c59cae1467e9f746212ce4f07e51475e56d6a6641e69d0
-
SSDEEP
3072:8bTWYo1kI5EvTWAewwhLDn/xeah7A2NDkwzhBtdfCrePAQ1rOQPXZzw:uWYo1/5EvTTKvn/xewA4hjpCaoUZPXZz
Malware Config
Signatures
Files
-
87e1f348e0a34bd8425f302ca95f7f04b47751714caf40a315330ee1aa5050a8.exe windows x86
43ba9ea7f238e3187a8d0307bdb91f1a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CloseHandle
CommConfigDialogA
CreateConsoleScreenBuffer
CreateDirectoryExA
CreateIoCompletionPort
DisconnectNamedPipe
ExitProcess
FindAtomA
FindFirstChangeNotificationA
FindNextChangeNotification
FormatMessageA
GetAtomNameA
GetCommConfig
GetCommandLineA
GetFullPathNameA
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileStringA
GetProcAddress
GetStartupInfoA
GetThreadPriority
GetThreadPriorityBoost
GetUserDefaultLangID
GlobalCompact
GlobalSize
HeapReAlloc
IsBadCodePtr
IsDebuggerPresent
MapViewOfFile
MapViewOfFileEx
ReleaseMutex
SetUnhandledExceptionFilter
SizeofResource
UnmapViewOfFile
WritePrivateProfileSectionA
WritePrivateProfileStringA
WritePrivateProfileStructA
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fread
free
fseek
malloc
memset
rewind
signal
time
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE