Static task
static1
Behavioral task
behavioral1
Sample
f89e1aab1d96d3858f7027c1f50bf98f04cbd28abae57a9cc7a00c3d417c9a2a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f89e1aab1d96d3858f7027c1f50bf98f04cbd28abae57a9cc7a00c3d417c9a2a.exe
Resource
win10v2004-20220812-en
General
-
Target
f89e1aab1d96d3858f7027c1f50bf98f04cbd28abae57a9cc7a00c3d417c9a2a
-
Size
77KB
-
MD5
03b1e749b1ff1fa9f345d0e1c964c5d3
-
SHA1
10f76ca5d93e25f2237b4000129b2123c639e84a
-
SHA256
f89e1aab1d96d3858f7027c1f50bf98f04cbd28abae57a9cc7a00c3d417c9a2a
-
SHA512
e655ecab375b8d4c2bc536a8d012d24cf67108ed2d6f5615f5ad437964bae54517449b21c692223f1e8aa0868c7deb91579e605cd5fb4325debc5bd5141f4e3a
-
SSDEEP
1536:s/yUyo3qve8nf2tC1P2d7bNIpY8AeBBckiAYUq:s2oge8uwR2ppSY6cknYZ
Malware Config
Signatures
Files
-
f89e1aab1d96d3858f7027c1f50bf98f04cbd28abae57a9cc7a00c3d417c9a2a.exe windows x86
8b7334b58e43f56413348737c8c4677a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadCodePtr
GetCurrentThread
GetModuleFileNameW
FileTimeToLocalFileTime
GetTempPathA
ExpandEnvironmentStringsA
EnumCalendarInfoA
GetOEMCP
SizeofResource
FreeEnvironmentStringsW
GetProcAddress
GetFileAttributesA
GetEnvironmentVariableA
DeleteFileW
DeleteFileA
FileTimeToSystemTime
SetCurrentDirectoryA
GlobalReAlloc
GlobalAlloc
GetUserDefaultLangID
DeviceIoControl
GetExitCodeProcess
SetUnhandledExceptionFilter
lstrlenW
GetModuleHandleA
GetDateFormatA
GetCommandLineA
VirtualProtect
TerminateProcess
RtlMoveMemory
LoadResource
GetThreadLocale
lstrcmpiA
CreateDirectoryA
msvcrt
__p__fmode
_exit
_adjust_fdiv
__set_app_type
_initterm
__p___initenv
_except_handler3
__p__commode
_XcptFilter
_controlfp
__getmainargs
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE