Static task
static1
Behavioral task
behavioral1
Sample
89eedc06937bce38ce826e74b69372e0d9dcb37c3aeb2185f1dd3da38ef3f5dd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89eedc06937bce38ce826e74b69372e0d9dcb37c3aeb2185f1dd3da38ef3f5dd.exe
Resource
win10v2004-20220812-en
General
-
Target
89eedc06937bce38ce826e74b69372e0d9dcb37c3aeb2185f1dd3da38ef3f5dd
-
Size
676KB
-
MD5
72a7ad49b514bc937c674cc97a1102ed
-
SHA1
f07174efc865f28b688ffd16aadcff12108c70c0
-
SHA256
89eedc06937bce38ce826e74b69372e0d9dcb37c3aeb2185f1dd3da38ef3f5dd
-
SHA512
01fa6fc08e0c8e16096052e86479ffb0883e4ab1fb488dac706e57d4a82fc30f2fc53f174af5f55473c3b4918fb92c1c2c72ab01ccc008b09514c0ca2d82ebb2
-
SSDEEP
12288:oyK8LZDK2WvvZmvUL6CC5dMpvhvYYcEyUr0cBULubaFMLlTKOeJI2:V7LRmvYU5btdBULA+M9Kz
Malware Config
Signatures
Files
-
89eedc06937bce38ce826e74b69372e0d9dcb37c3aeb2185f1dd3da38ef3f5dd.exe windows x86
156518bfc3ee8505c656f36daaf09c67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyIcon
GetDCEx
IsZoomed
GetSystemMenu
ReleaseCapture
UnregisterHotKey
InvalidateRgn
GetSystemMetrics
GetWindowTextW
GetKeyState
IsClipboardFormatAvailable
GetWindow
SetCursor
MapWindowPoints
ClientToScreen
GetWindowRgn
wsprintfW
GetMenuItemCount
TranslateMessage
GetFocus
OpenClipboard
EndDialog
SetWindowPos
RemoveMenu
CloseClipboard
ScreenToClient
EmptyClipboard
RegisterClassW
SetWindowRgn
GetSubMenu
GetForegroundWindow
DrawEdge
IsWindowVisible
GetScrollInfo
GetWindowPlacement
SetWindowTextA
AdjustWindowRectEx
GetParent
MessageBoxW
MessageBeep
CopyImage
PostQuitMessage
GetDesktopWindow
DrawFrameControl
SetScrollInfo
GetMenuStringW
GetNextDlgTabItem
GetMenuState
GetMenuDefaultItem
IsRectEmpty
BringWindowToTop
TrackPopupMenu
GetMenuItemID
GetDlgCtrlID
GetCapture
EnableMenuItem
PeekMessageW
InsertMenuW
BeginPaint
SetClipboardData
GetCursorPos
GetClipboardData
RegisterClassExW
ChildWindowFromPoint
UnpackDDElParam
GetMessageTime
UnregisterClassA
CreateWindowExW
PtInRect
TrackPopupMenuEx
MoveWindow
GetClientRect
DefWindowProcW
KillTimer
GetWindowLongW
SetTimer
RedrawWindow
PostThreadMessageW
DestroyWindow
InvalidateRect
RegisterHotKey
CheckMenuItem
GetWindowTextA
LoadImageW
ShowWindow
SystemParametersInfoW
InsertMenuItemW
GetWindowThreadProcessId
ReuseDDElParam
IsIconic
SendMessageW
SetMenu
ReleaseDC
GetScrollPos
SetActiveWindow
GetMessageW
DestroyCursor
SetCapture
GetMessagePos
SetFocus
CallNextHookEx
GetDC
EndPaint
GetDlgItem
IsWindow
FillRect
GetMenu
IsChild
GetSysColorBrush
GetIconInfo
GetActiveWindow
GetAsyncKeyState
EnableWindow
GetSysColor
DeleteMenu
DrawFocusRect
IsDlgButtonChecked
CopyRect
UnhookWindowsHookEx
DispatchMessageW
IntersectRect
InflateRect
SetForegroundWindow
UnregisterClassW
OffsetRect
DrawTextW
comdlg32
ChooseColorA
PageSetupDlgA
GetFileTitleA
GetSaveFileNameA
CommDlgExtendedError
GetOpenFileNameA
oleaut32
LoadTypeLi
kernel32
IsValidLocale
TlsAlloc
MultiByteToWideChar
FatalAppExitA
CompareStringW
GetACP
QueryPerformanceCounter
GetOEMCP
GetSystemInfo
HeapReAlloc
GetEnvironmentStringsW
VirtualFree
GetFileType
GetStringTypeW
LoadLibraryA
CreateMutexW
SetEnvironmentVariableA
VirtualProtect
GetCommandLineA
VirtualQuery
HeapDestroy
WriteFile
GetCurrentThreadId
LCMapStringA
ExitProcess
GetTickCount
GetLastError
GetLocaleInfoA
GetCommandLineW
GetTimeZoneInformation
SetLastError
EnterCriticalSection
HeapAlloc
GetModuleFileNameW
TerminateProcess
GetStartupInfoA
CompareStringA
GetCurrentProcess
FlushFileBuffers
TlsSetValue
GetModuleFileNameA
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
SetFilePointer
InitializeCriticalSection
GetEnvironmentStrings
UnhandledExceptionFilter
WideCharToMultiByte
SetUnhandledExceptionFilter
HeapCreate
VirtualAlloc
SetConsoleCtrlHandler
IsBadWritePtr
GetStringTypeA
ReadFile
HeapSize
GetCPInfo
GetTimeFormatA
GetProcAddress
RaiseException
LeaveCriticalSection
DeleteCriticalSection
GetStartupInfoW
GetCurrentThread
SetHandleCount
LCMapStringW
GetDateFormatA
GetVersionExA
HeapFree
SetStdHandle
GetModuleHandleW
InterlockedExchange
IsBadCodePtr
IsValidCodePage
TlsGetValue
GetUserDefaultLCID
GetLocaleInfoW
IsBadReadPtr
RtlUnwind
FreeEnvironmentStringsW
CloseHandle
GetModuleHandleA
GetStdHandle
GetCurrentProcessId
TlsFree
comctl32
ord17
InitCommonControlsEx
PropertySheetW
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
GetPrinterA
ord204
GetJobA
Sections
.text Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 452KB - Virtual size: 450KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ