Static task
static1
Behavioral task
behavioral1
Sample
86f806693f90cc63dadd1491977157308cb449f6286ee4eadbe340a9fd529b17.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
86f806693f90cc63dadd1491977157308cb449f6286ee4eadbe340a9fd529b17.exe
Resource
win10v2004-20220812-en
General
-
Target
86f806693f90cc63dadd1491977157308cb449f6286ee4eadbe340a9fd529b17
-
Size
144KB
-
MD5
6af0ebddadbdf3cdb7b1ddb79f6a93e6
-
SHA1
eb2334d107e720d84d65146e59aaf25e8e3cadf4
-
SHA256
86f806693f90cc63dadd1491977157308cb449f6286ee4eadbe340a9fd529b17
-
SHA512
c6d188bc5aaf40b43c647b3b6550022b74fb102abd23f1d5d02083501ba8a4766f1de92781198328dad0bf9db2854e07d8342d434f5b93c6fe6d307bcafe8e5a
-
SSDEEP
1536:FDWCi+oCwrjptfiune5rD2Jz4YnNZ5b8fUx44555Yt:FD1KvpIunoD2u+dtxmt
Malware Config
Signatures
Files
-
86f806693f90cc63dadd1491977157308cb449f6286ee4eadbe340a9fd529b17.exe windows x86
7a1f0f2d6b629dcb22dfebd3bdb088c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowTextA
LoadMenuA
advapi32
RegDeleteValueW
RegDeleteValueA
RegLoadKeyA
kernel32
DeleteFileW
ExitThread
OpenFileMappingA
CompareStringA
GetLastError
Sections
.eb5a Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.39855 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.32g0b Size: 56KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.409f Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.4e70a Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ