Static task
static1
Behavioral task
behavioral1
Sample
c89c834485fc5b82070825d066a8a0c8de95443a36156ec61adc5f40b8c5b27e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c89c834485fc5b82070825d066a8a0c8de95443a36156ec61adc5f40b8c5b27e.exe
Resource
win10v2004-20220812-en
General
-
Target
c89c834485fc5b82070825d066a8a0c8de95443a36156ec61adc5f40b8c5b27e
-
Size
277KB
-
MD5
055edc7f3251c7deea4ca0df9ae71158
-
SHA1
ac94af82151251cd13001c5455063c3a5e4e7f4c
-
SHA256
c89c834485fc5b82070825d066a8a0c8de95443a36156ec61adc5f40b8c5b27e
-
SHA512
4b277dbd17c75ecf332fb09d2675a420d350100195cc80ab259a633a533fde903697e23f173f4271d11d74d0038681466258680dac014a89785fdd83a2d7d895
-
SSDEEP
6144:lFjuB5zbQFud0WStI5sUUMWZQKX0RN94GTzRg:vjunYFudVsUUMmQ8WzC
Malware Config
Signatures
Files
-
c89c834485fc5b82070825d066a8a0c8de95443a36156ec61adc5f40b8c5b27e.exe windows x86
b4f87b0b3ca79eeacccb8ade26fb306e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDesktopWindow
CharNextA
GetDC
GetSystemMetrics
kernel32
GetThreadLocale
lstrlenA
GetCurrentThread
GetUserDefaultLangID
GetCommandLineA
GetStartupInfoA
GetCurrentThreadId
SetCurrentDirectoryA
GlobalFindAtomW
GetACP
GetProcessHeap
RemoveDirectoryA
Sleep
GetCommandLineW
GetWindowsDirectoryA
GetLastError
GetCurrentProcessId
SetLastError
MulDiv
GetCurrentProcess
GetModuleHandleA
GetConsoleOutputCP
DeleteFileA
GetModuleHandleW
lstrlenW
QueryPerformanceCounter
lstrcmpiA
LoadLibraryW
GetTickCount
CopyFileA
DeleteFileW
GetOEMCP
IsDebuggerPresent
lstrcmpA
GetDriveTypeA
GlobalFindAtomA
lstrcmpiW
GetVersion
VirtualAlloc
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.irdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE