Static task
static1
Behavioral task
behavioral1
Sample
87df9274c0946b6bcad72f2fd5a3637cac3b363e834fe21e2051f1a370d5d856.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
87df9274c0946b6bcad72f2fd5a3637cac3b363e834fe21e2051f1a370d5d856.exe
Resource
win10v2004-20220812-en
General
-
Target
87df9274c0946b6bcad72f2fd5a3637cac3b363e834fe21e2051f1a370d5d856
-
Size
273KB
-
MD5
c5ec8d4d5fad12590b5cdb5a3b504916
-
SHA1
07818943402a40cf76b0846d21114ca6012ef5ef
-
SHA256
87df9274c0946b6bcad72f2fd5a3637cac3b363e834fe21e2051f1a370d5d856
-
SHA512
5dd22d8df70b65494997d0f5d7b195b585f55e29b7163c342af4f1e50cced8d9a8bc2b7fffb0ef8f463709b6f66cc5c3e4e4849d477434e11444f312469d5aa5
-
SSDEEP
6144:d6Jm3BEjRBFwruVHlm6rssXV/diQhkJSnjF8BfiEFr6vilX:4mREjSSVHlm6Y6/dFkJSjitiEEax
Malware Config
Signatures
Files
-
87df9274c0946b6bcad72f2fd5a3637cac3b363e834fe21e2051f1a370d5d856.exe windows x86
fabdea860d5741198a223d44468721a6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GlobalGetAtomNameA
GetTimeFormatA
UnhandledExceptionFilter
FreeLibrary
GetSystemTimeAsFileTime
GetCPInfo
GetConsoleOutputCP
GetCurrentProcessId
WriteFile
WriteConsoleA
HeapSize
HeapReAlloc
GetDateFormatA
IsDebuggerPresent
SetFilePointer
VirtualAlloc
EnumResourceNamesW
TerminateProcess
EnterCriticalSection
GetStringTypeA
GetLocaleInfoA
SetStdHandle
LoadLibraryA
RtlUnwind
IsValidCodePage
GetACP
GetCurrentProcess
InitializeCriticalSection
GetOEMCP
LeaveCriticalSection
SetUnhandledExceptionFilter
RaiseException
shlwapi
SHCreateStreamOnFileW
PathIsContentTypeA
SHCreateStreamOnFileEx
PathAppendA
PathIsFileSpecA
PathCreateFromUrlW
rpcrt4
RpcStringFreeA
Sections
.text Size: 130KB - Virtual size: 269KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ