Static task
static1
Behavioral task
behavioral1
Sample
87c138ecc5fbab312073b7b04469e9a615525cc47280306c411e35c8dfae865c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
87c138ecc5fbab312073b7b04469e9a615525cc47280306c411e35c8dfae865c.exe
Resource
win10v2004-20221111-en
General
-
Target
87c138ecc5fbab312073b7b04469e9a615525cc47280306c411e35c8dfae865c
-
Size
365KB
-
MD5
7185da007f6845e9ae0142b27fb6fa4e
-
SHA1
885a1239bb1c9c8f7d5fbc3391106f5f752b2b51
-
SHA256
87c138ecc5fbab312073b7b04469e9a615525cc47280306c411e35c8dfae865c
-
SHA512
2a40855abda1ff34bd1656ab15e0ddd6c13b016874e6b62a170c3440e6d07c22de6e573d98a7162964d898d580eb2aba999adb42674c7e6654857bdd8bd1fcf7
-
SSDEEP
6144:IDSnAh8z/W0xLh74H3Iwhp7uzvCKnPpyHbYnemgo3ArW0gRknQ8vVV6k:XAh8z/W0wH4whp7aaeMHb5mL3ArW0gR+
Malware Config
Signatures
Files
-
87c138ecc5fbab312073b7b04469e9a615525cc47280306c411e35c8dfae865c.exe windows x86
658467773bcfc337f2b152e1a2379756
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
lstrlen
GetConsoleMode
GetStdHandle
SetLastError
CloseHandle
TlsGetValue
Sleep
CreateFileA
GlobalUnlock
HeapCreate
LoadLibraryExW
SetEnvironmentVariableA
CreateMutexA
TerminateThread
LocalFree
ReleaseMutex
FindResourceA
PulseEvent
GetModuleHandleA
user32
DrawMenuBar
CallWindowProcA
IsWindow
CopyRect
DrawEdge
GetDlgItem
GetDC
FillRect
DispatchMessageA
DefWindowProcW
CheckRadioButton
SetFocus
GetIconInfo
uxtheme
DrawThemeIcon
GetCurrentThemeName
CloseThemeData
GetThemeBool
GetThemeColor
dpnet
DirectPlay8Create
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 768KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 356KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ