Static task
static1
Behavioral task
behavioral1
Sample
889eab5731f8d38820390bbf0e5d08a7fb04a2ee6b5bf0fa40df6a0413905195.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
889eab5731f8d38820390bbf0e5d08a7fb04a2ee6b5bf0fa40df6a0413905195.exe
Resource
win10v2004-20220812-en
General
-
Target
889eab5731f8d38820390bbf0e5d08a7fb04a2ee6b5bf0fa40df6a0413905195
-
Size
178KB
-
MD5
92148f700e4cb4514bcc3a331a5b4521
-
SHA1
c727836d651d6657c0bf6b47e28a393fbee7d574
-
SHA256
889eab5731f8d38820390bbf0e5d08a7fb04a2ee6b5bf0fa40df6a0413905195
-
SHA512
483aff3d5fe52ea265efe18990be4bf5dc67041044c27ac3a9791256d749d8bd665e08c8ac4bd73d8d08cb53c0cbafa0a4945feb0bcf43e48b9aca8fce0bf6a0
-
SSDEEP
3072:PVOac/87f+NybvE0w1iCnN80uAzcaB08V8ek/XJenvsu+tRFutNMG6t72mhrscJ:P77foMEVZNGAzcaBd6x1tRFyNA20scJ
Malware Config
Signatures
Files
-
889eab5731f8d38820390bbf0e5d08a7fb04a2ee6b5bf0fa40df6a0413905195.exe windows x86
1ac26428251a6231414ce671d635ffef
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
kernel32
GetConsoleCP
UnmapViewOfFile
GetCalendarInfoA
CreateFileA
GetVersionExA
TlsSetValue
SetLastError
GetTempPathW
WaitForSingleObject
CreateFileMappingA
TlsAlloc
WriteConsoleW
ExitProcess
GetVersionExW
InterlockedIncrement
GetModuleHandleA
MoveFileExW
GetProcessHeap
MapViewOfFile
CreateFileW
LoadLibraryExW
CreateThread
EnumResourceNamesA
SetEvent
GetEnvironmentVariableW
TlsFree
TlsGetValue
CreateProcessW
HeapFree
FindFirstFileW
CreateDirectoryW
GetModuleHandleW
FlushFileBuffers
GetConsoleMode
GetExitCodeProcess
HeapAlloc
GetProcAddress
GetLastError
ole32
CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ