Static task
static1
Behavioral task
behavioral1
Sample
89070475981742d6e5cdf508acabe0d14f7032c71d06ed2a016e332282e9e2a8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89070475981742d6e5cdf508acabe0d14f7032c71d06ed2a016e332282e9e2a8.exe
Resource
win10v2004-20220812-en
General
-
Target
89070475981742d6e5cdf508acabe0d14f7032c71d06ed2a016e332282e9e2a8
-
Size
308KB
-
MD5
90c67436b9df9e126219c83f32cf30a0
-
SHA1
71e15fc15a1ec04ec6ef5002f47308a7fecc535b
-
SHA256
89070475981742d6e5cdf508acabe0d14f7032c71d06ed2a016e332282e9e2a8
-
SHA512
23401ca28ab820db36abf46fcf67b8ca7aba5a0bfcf4df3d68e93472ddf3c65e8ff8641679d17d21c8e3b50a5157b02c1a88b3719f59157cc7b9a7f7fa1ac152
-
SSDEEP
3072:4hNyIEuEFIVfSDpmQlJTlBeqFbFIEEMBX0npxW/zR1yBm+SFUZA3IJ10W7H0kDHQ:+jEuECVfMmSTlgETCKzjRyJ10W7H0GM
Malware Config
Signatures
Files
-
89070475981742d6e5cdf508acabe0d14f7032c71d06ed2a016e332282e9e2a8.exe windows x86
07adf4452b36ff6c31f0fc9624863b09
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenMutexA
InterlockedExchange
VirtualFree
GetProcAddress
GetModuleHandleA
RemoveDirectoryA
ExitProcess
DeleteFileA
GetLastError
VirtualAllocEx
GetStartupInfoA
GetCommandLineA
GetVersionExA
WriteFile
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
MultiByteToWideChar
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetFilePointer
FlushFileBuffers
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
RtlUnwind
GetStringTypeA
GetStringTypeW
ReadFile
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
RaiseException
LCMapStringA
LCMapStringW
HeapSize
GetLocaleInfoA
CloseHandle
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.exec Size: 4KB - Virtual size: 238B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 220KB - Virtual size: 223KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rinit Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ