Static task
static1
Behavioral task
behavioral1
Sample
87817efed0fe5f06b03e0c170a13d12f639237254d13bfee8a4a13a1a55f869d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
87817efed0fe5f06b03e0c170a13d12f639237254d13bfee8a4a13a1a55f869d.exe
Resource
win10v2004-20221111-en
General
-
Target
87817efed0fe5f06b03e0c170a13d12f639237254d13bfee8a4a13a1a55f869d
-
Size
346KB
-
MD5
747ce81d83e5718949fed679b18e77d3
-
SHA1
71bedaa077e268d607cea461af0e2bdfa1e2db45
-
SHA256
87817efed0fe5f06b03e0c170a13d12f639237254d13bfee8a4a13a1a55f869d
-
SHA512
f98af5983636807da7b2927610172b0066ad25229cae8d19a9651f7547b15f67390f3415b8199abd0797128476a329aed3c8c909026248c3a5a92cd601b586fe
-
SSDEEP
6144:CBLAha4kL6kZU8h2MuhYosVs7YNSd+5L/t1WnjwB3ueKsvPhosjOtJmI:Cka4xkTlzwqh1WnjNQPVOt
Malware Config
Signatures
Files
-
87817efed0fe5f06b03e0c170a13d12f639237254d13bfee8a4a13a1a55f869d.exe windows x86
f00bb3db5b13c1c30ab3d95f7f91ac50
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GlobalUnlock
UnmapViewOfFile
LoadLibraryW
CreateThread
GetComputerNameA
CreateFileW
GetCommandLineW
PulseEvent
GetSystemTime
ResetEvent
CloseHandle
HeapCreate
LocalFree
GetCurrentDirectoryA
lstrlenA
lstrcpyA
FindClose
GetModuleHandleA
Sleep
user32
FillRect
DrawMenuBar
CreateWindowExA
GetDC
SetFocus
GetKeyState
DrawEdge
IsWindow
DispatchMessageA
GetDlgItem
GetScrollBarInfo
CheckRadioButton
CallWindowProcA
cryptui
WizardFree
CryptUIDlgCertMgr
CryptUIDlgSelectStoreA
LocalEnroll
CryptUIDlgSelectCA
timedate.cpl
CPlApplet
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ