Static task
static1
Behavioral task
behavioral1
Sample
87285b34817e1db9636dd21d35f70d5a457427b7802a4751ba5f03825e18bcf7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
87285b34817e1db9636dd21d35f70d5a457427b7802a4751ba5f03825e18bcf7.exe
Resource
win10v2004-20220812-en
General
-
Target
87285b34817e1db9636dd21d35f70d5a457427b7802a4751ba5f03825e18bcf7
-
Size
404KB
-
MD5
dfbfbb22861db8f0f68e40c48a053881
-
SHA1
12033412d19d7677fefa83105ff27b4839ccd390
-
SHA256
87285b34817e1db9636dd21d35f70d5a457427b7802a4751ba5f03825e18bcf7
-
SHA512
155d4672602581ac6a153f09c2bd5a599e7afba1e839276c6810d0c698352815e75bb4fed1b53786af3ff5a3c4bec510cf14aa59c26709baccf1a79ea9c18c9a
-
SSDEEP
6144:07nNZw2iBf5ntmuJ+30DXcBBXplE6awhbWelA2eiKGKarbKx18juMNtn4xtssCQ:07nj1iBBtnxqZlE6asWeO5Sr+UrUtpC
Malware Config
Signatures
Files
-
87285b34817e1db9636dd21d35f70d5a457427b7802a4751ba5f03825e18bcf7.exe windows x86
c94491f4800c4584f175c6f34683a12c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
InterlockedExchange
CreateFileA
VirtualAlloc
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetStringTypeW
user32
ShowWindow
LoadIconA
msvfw32
DrawDibEnd
winmm
mixerSetControlDetails
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 419KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 332KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ