Static task
static1
Behavioral task
behavioral1
Sample
89c9ed48e63102aedc49c685216d89399d911938d2cd206569687a9bbf3e390c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89c9ed48e63102aedc49c685216d89399d911938d2cd206569687a9bbf3e390c.exe
Resource
win10v2004-20220901-en
General
-
Target
89c9ed48e63102aedc49c685216d89399d911938d2cd206569687a9bbf3e390c
-
Size
128KB
-
MD5
72a228f148bc5d4715d0dbc1b9327ba0
-
SHA1
1a836616a122eab3a2d2ac20f4af9f4cdc2b9f99
-
SHA256
89c9ed48e63102aedc49c685216d89399d911938d2cd206569687a9bbf3e390c
-
SHA512
8f983392bdf8f0dacf5ff8b8d8177b16b8a97393ad54da25cc6033ba62d538a867586a2c1d34bb725cc9fa22f7558b8fe1036ee1353f4e21c6c468fde59aac99
-
SSDEEP
3072:ykJRbcaKxsslOq4HIWYMmxolLFw6K1Mp:RRbbKGXYMIGK1M
Malware Config
Signatures
Files
-
89c9ed48e63102aedc49c685216d89399d911938d2cd206569687a9bbf3e390c.exe windows x86
fd4ae9274b753a4d333dffa323567af9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesW
GetPrivateProfileSectionA
GetPrivateProfileIntA
RemoveDirectoryW
GetCurrentThread
SetLastError
HeapFree
GetVersionExA
SetCommBreak
LocalFlags
CloseHandle
CreateDirectoryW
CreateEventA
DeviceIoControl
GetModuleHandleA
GetStringTypeA
VirtualProtectEx
GlobalLock
GetCurrentProcess
GetFileAttributesW
FindClose
user32
SetFocus
SetCursorPos
IsDialogMessageA
DispatchMessageA
GetWindowTextW
LoadCursorW
CloseDesktop
wsprintfW
PeekMessageW
GetWindowLongW
IsWindow
PostMessageW
IsZoomed
mswsock
getnetbyname
GetServiceA
GetAddressByNameA
GetNameByTypeA
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ