Static task
static1
Behavioral task
behavioral1
Sample
f89a61dafb96e3322fa903ce00bb9f290db0d1da39a7a5eac396cb542341fa54.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f89a61dafb96e3322fa903ce00bb9f290db0d1da39a7a5eac396cb542341fa54.exe
Resource
win10v2004-20220812-en
General
-
Target
f89a61dafb96e3322fa903ce00bb9f290db0d1da39a7a5eac396cb542341fa54
-
Size
735KB
-
MD5
6847b35a3be13aa219806e8351495020
-
SHA1
4a8afbf6f3772b3a1c277668c64451d25568b369
-
SHA256
f89a61dafb96e3322fa903ce00bb9f290db0d1da39a7a5eac396cb542341fa54
-
SHA512
cba445714d8225f929ef8c67473de1bb5d85383328b5ab6b1fdf476d3eb6a5f31d0b6a740c0e9b286d4e160ad5eaf275e9ca2f25300ff4ab3c57584263241169
-
SSDEEP
12288:qLM2vy7hCILsOuW2Q6Y2BVQ428W+vqWt0S9SiPYZZz1SHU1vOjYt/8DIhd7OwLMl:gMhCILsOuWeBVl2b+vhOUpkpSHU1r/en
Malware Config
Signatures
Files
-
f89a61dafb96e3322fa903ce00bb9f290db0d1da39a7a5eac396cb542341fa54.exe windows x86
53e92335e74fd01f0d86758a87341ec2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteW
iphlpapi
GetAdaptersInfo
ws2_32
gethostbyaddr
wtsapi32
WTSRegisterSessionNotification
Sections
.text Size: 68KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 585KB - Virtual size: 585KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdfegh Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE