Static task
static1
Behavioral task
behavioral1
Sample
87e9aeca0070ab1c55ecd84f8634bb59bcdd5330718226b1b17ecfe6e9ea895e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
87e9aeca0070ab1c55ecd84f8634bb59bcdd5330718226b1b17ecfe6e9ea895e.exe
Resource
win10v2004-20221111-en
General
-
Target
87e9aeca0070ab1c55ecd84f8634bb59bcdd5330718226b1b17ecfe6e9ea895e
-
Size
550KB
-
MD5
2cb44f32b5efe161f80fe503cdfa1533
-
SHA1
082992eb4604cab4ee5627841b485a5247d99ef6
-
SHA256
87e9aeca0070ab1c55ecd84f8634bb59bcdd5330718226b1b17ecfe6e9ea895e
-
SHA512
bc5a331d25e6f3426ffcf0e8001d02c8faa3c0648494ae3647378985616b73f7c36194ff4e2ede768f5069facabeed7b4e2c66b70861158cdb5017971dc4245f
-
SSDEEP
12288:biCn3IYb2zNl6hWYfzrGMcUL5NXTgUGSTLU2pDZ2EEpb+9zKT:F3Rb27cPZb7jlU2pDZ2EuahKT
Malware Config
Signatures
Files
-
87e9aeca0070ab1c55ecd84f8634bb59bcdd5330718226b1b17ecfe6e9ea895e.exe windows x86
a65750b0266105b8e7a4f35011ac189b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
OpenClipboard
gdi32
GetClipRgn
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
VariantCopyInd
comctl32
ImageList_Destroy
ws2_32
ioctlsocket
comdlg32
ChooseColorA
Sections
.text Size: 536KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE