Static task
static1
Behavioral task
behavioral1
Sample
87a2754affb566ccd52b2ffe474ffbe9dd90ffd020bd9bd4a18250d9c8485f8b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
87a2754affb566ccd52b2ffe474ffbe9dd90ffd020bd9bd4a18250d9c8485f8b.exe
Resource
win10v2004-20220901-en
General
-
Target
87a2754affb566ccd52b2ffe474ffbe9dd90ffd020bd9bd4a18250d9c8485f8b
-
Size
279KB
-
MD5
e9c0b54713c3f58985f6502d05813b5b
-
SHA1
7d4e368512a44776b2a9273465bb978d810b6f5a
-
SHA256
87a2754affb566ccd52b2ffe474ffbe9dd90ffd020bd9bd4a18250d9c8485f8b
-
SHA512
6cb135263f9aab6543971f852dae2fd304d48ff81ec9a69c4888961afffe5c4ea4ab07ab7a939aad3f937e1ed08801062363e76dbe2202df0d157c962ed8cba3
-
SSDEEP
6144:CGahaRFe4Bk/K/jNrart0Nz1rH/MWQDTi86OuyTtRN9vVti:CGiavOMxiW901i85uyxR
Malware Config
Signatures
Files
-
87a2754affb566ccd52b2ffe474ffbe9dd90ffd020bd9bd4a18250d9c8485f8b.exe windows x86
323896a286de83a6eabe8e34f193ac21
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
CreateDirectoryA
SetVolumeLabelA
ResetEvent
IsBadWritePtr
GetVersion
GetSystemTime
SetEvent
FindClose
CreateSemaphoreW
RemoveDirectoryA
GetFileType
FindClose
ReleaseMutex
ExitThread
CreatePipe
GetDriveTypeW
RemoveDirectoryA
WriteFile
HeapFree
SetStdHandle
FindAtomA
GetModuleHandleA
WriteConsoleA
VirtualProtectEx
uxtheme
GetWindowTheme
GetThemeRect
CloseThemeData
GetThemeColor
GetThemeTextExtent
GetThemeTextMetrics
IsThemeActive
CloseThemeData
OpenThemeData
GetThemeSysSize
DrawThemeBackground
SetWindowTheme
DrawThemeEdge
pstorsvc
Start
Start
Start
Start
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ