Static task
static1
Behavioral task
behavioral1
Sample
87c3bb021981c927d792010546051d9762e58db355523d73a80787a8f0e0ff41.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
87c3bb021981c927d792010546051d9762e58db355523d73a80787a8f0e0ff41.exe
Resource
win10v2004-20221111-en
General
-
Target
87c3bb021981c927d792010546051d9762e58db355523d73a80787a8f0e0ff41
-
Size
180KB
-
MD5
fe8ba90a57e06dec899b54c0021bbfb6
-
SHA1
3808cbf24cebd36068ff942284d9234bcc774d02
-
SHA256
87c3bb021981c927d792010546051d9762e58db355523d73a80787a8f0e0ff41
-
SHA512
c5b8ada6cf844645a923db92a8a8979d0a86860c181d9dcec66e2519934338c35d9ca496b6a1b668863cf002d9e8c23a96b1e17b7d671ce93efc4e337e5ecaac
-
SSDEEP
3072:LbO9Ef1Chyp3ximQcpRupbHxl43fPBHQoIEj4hc1pXmaSP3N9pU49Mps859:LbOu9CESUpRMbr43fqA4hc1NRehwsO9
Malware Config
Signatures
Files
-
87c3bb021981c927d792010546051d9762e58db355523d73a80787a8f0e0ff41.exe windows x86
048804e9439874ff3bc6dfd905e340ed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
UpdateWindow
TranslateMessage
ShowWindow
SetFocus
SendMessageA
RegisterClassExA
PostQuitMessage
MoveWindow
MessageBoxA
LoadIconA
LoadCursorA
GetSystemMetrics
GetMessageA
DispatchMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
gdi32
CreateFontIndirectA
kernel32
lstrcatA
lstrlenA
Sleep
RtlZeroMemory
LoadLibraryA
VirtualProtect
lstrcpyA
CreateThread
ExitProcess
FreeLibrary
GetCommandLineA
GetCurrentDirectoryA
GetModuleHandleA
GetPrivateProfileStringA
GetProcessHeap
HeapAlloc
comctl32
InitCommonControls
advapi32
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 171KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE