Static task
static1
Behavioral task
behavioral1
Sample
89873322486bee35f47aaf616120ac9064a662b7788883d85daedbc038f0e868.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89873322486bee35f47aaf616120ac9064a662b7788883d85daedbc038f0e868.exe
Resource
win10v2004-20220812-en
General
-
Target
89873322486bee35f47aaf616120ac9064a662b7788883d85daedbc038f0e868
-
Size
368KB
-
MD5
72576e81d1ca237d56113708d95be720
-
SHA1
0d235eb3d296c3712e91801ecdf4d9626d6be800
-
SHA256
89873322486bee35f47aaf616120ac9064a662b7788883d85daedbc038f0e868
-
SHA512
d866486e6c9583303d48d115582499e21f4a35361231a858ace0ad37ef6fa42f5ea10311bed91332d92f74e8c19d71cba6c9612305ec8734a682a0bb7afe547d
-
SSDEEP
6144:oDlbT06qE0ojJywYwdX+2AXQ7KlyUqZtP:clbw6qErjJTSQ7KGp
Malware Config
Signatures
Files
-
89873322486bee35f47aaf616120ac9064a662b7788883d85daedbc038f0e868.exe windows x86
5939d387db90c426cd3554975c6207a7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
InterlockedIncrement
GetModuleHandleA
SuspendThread
Sleep
WaitForMultipleObjects
OpenMutexA
VirtualAllocEx
GetLastError
GetProcAddress
LoadLibraryA
CreateMutexW
FlushFileBuffers
SetStdHandle
LCMapStringW
LCMapStringA
RaiseException
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetModuleFileNameA
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
GetCurrentProcess
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
CloseHandle
user32
UpdateWindow
SendMessageW
ole32
CoUninitialize
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 276KB - Virtual size: 273KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ