Static task
static1
Behavioral task
behavioral1
Sample
87ed165deb741f4bc455001170c6c91eee152cd8ed9abcebbf358f201ec19ad4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
87ed165deb741f4bc455001170c6c91eee152cd8ed9abcebbf358f201ec19ad4.exe
Resource
win10v2004-20221111-en
General
-
Target
87ed165deb741f4bc455001170c6c91eee152cd8ed9abcebbf358f201ec19ad4
-
Size
172KB
-
MD5
689b75e509670970d815df3db78a8b13
-
SHA1
692bc3c80d57c960ba8a4b3da1b6154fd35ee0dd
-
SHA256
87ed165deb741f4bc455001170c6c91eee152cd8ed9abcebbf358f201ec19ad4
-
SHA512
ab9f9167bcaf0da08dcb62221674ed2988d76a3bc34d5734157b1404fbdeee8584a815c532d63e1434759d2e02f4635137306f2130d357930fdd3979d3aa17ca
-
SSDEEP
3072:jl/XkUTp31rHO73lCesDRQeMI7p5j6zReKxD+TthZex726C1VfL:jiUTxhHOLl7shMu/j6zReKEIxit
Malware Config
Signatures
Files
-
87ed165deb741f4bc455001170c6c91eee152cd8ed9abcebbf358f201ec19ad4.exe windows x86
e88a083be3aa1f561f2ad767a18be809
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
?terminate@@YAXXZ
__getmainargs
exit
_cexit
__setusermatherr
_vsnwprintf
_amsg_exit
memset
__set_app_type
_ismbblead
_vsnprintf
_XcptFilter
_acmdln
_exit
__p__commode
__p__fmode
_initterm
_controlfp
setupapi
CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
GetStartupInfoA
AddAtomW
CloseHandle
GetComputerNameA
GetCurrentProcess
SetHandleCount
GetVersionExA
SetUnhandledExceptionFilter
GetModuleHandleW
DeviceIoControl
GlobalMemoryStatus
GetLocalTime
GetCurrentThread
GetCurrentProcessId
TlsFree
TlsAlloc
GetFileType
HeapFree
GetSystemTimeAsFileTime
GetDiskFreeSpaceA
HeapAlloc
GetModuleFileNameA
EnumResourceNamesA
GetTickCount
TerminateProcess
OutputDebugStringW
TlsGetValue
SetLastError
TlsSetValue
RtlUnwind
GetProcessHeap
QueryPerformanceCounter
GetVersion
GetCommandLineA
RaiseException
GetStdHandle
InterlockedExchange
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ