Static task
static1
Behavioral task
behavioral1
Sample
f87dffcf842f33e57a673a29079039967b1663c0c58543e269d6cea4861af1e6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f87dffcf842f33e57a673a29079039967b1663c0c58543e269d6cea4861af1e6.exe
Resource
win10v2004-20220901-en
General
-
Target
f87dffcf842f33e57a673a29079039967b1663c0c58543e269d6cea4861af1e6
-
Size
52KB
-
MD5
40e4f081874b103db63fd5066abb63e4
-
SHA1
b4d4a7cd48cc0db57dac9f22c5b478489f819ef0
-
SHA256
f87dffcf842f33e57a673a29079039967b1663c0c58543e269d6cea4861af1e6
-
SHA512
c0760a9aeec5cd850c574969a98a98eb2ab7859956ea79f5cad0f12c4bf7b5a99abc8ee344eaeba67d6bae669c5470835e2203de3d4668d670bf5fd76b252ade
-
SSDEEP
768:YVneC6ASv16GTdy/AMlBGN5duLe5PodoadSMdh:WeUSYV1lk5d5xodoadSMdh
Malware Config
Signatures
Files
-
f87dffcf842f33e57a673a29079039967b1663c0c58543e269d6cea4861af1e6.exe windows x86
24887cabb4e1780516edeaabfc92d7ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Beep
VirtualFree
VirtualAlloc
SizeofResource
LockResource
LoadResource
FindResourceA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
LoadLibraryA
GetCPInfo
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
GetACP
GetProcAddress
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
HeapReAlloc
TerminateProcess
GetStringTypeW
user32
LoadCursorA
LoadAcceleratorsA
GetMessageA
TranslateMessage
DispatchMessageA
TranslateAcceleratorA
IsDialogMessageA
CreateDialogParamA
GetWindowRect
ShowWindow
UpdateWindow
RegisterDeviceNotificationA
GetDlgItem
LoadIconA
GetMenu
SendMessageA
wsprintfA
MessageBoxA
gdi32
CreateFontA
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ