Static task
static1
Behavioral task
behavioral1
Sample
c589f1a8d28492d88b8d041c635911c12399d0cef3900c78d1a10f6d7140bcfc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c589f1a8d28492d88b8d041c635911c12399d0cef3900c78d1a10f6d7140bcfc.exe
Resource
win10v2004-20220812-en
General
-
Target
c589f1a8d28492d88b8d041c635911c12399d0cef3900c78d1a10f6d7140bcfc
-
Size
81KB
-
MD5
90011def013f05a3f7fb2f1ed9b32930
-
SHA1
236d858e1189429e074f5f5c7538760e3992c85e
-
SHA256
c589f1a8d28492d88b8d041c635911c12399d0cef3900c78d1a10f6d7140bcfc
-
SHA512
7316b8441bed70314136565ea1a64e9171e0f277f576fc3cd860637302dcfd76c0f88ac70f1085bf0786c0aba2111f8b7f77879949ba352b5e6d38ff63e80dc0
-
SSDEEP
1536:WlzHVAfFd8qjJmQxX4APTYvwj3B0Ek5+273xeb9TocaIf9:SzHWfFd8qjJmyJP8Yj3SEkD7Eb9o8
Malware Config
Signatures
Files
-
c589f1a8d28492d88b8d041c635911c12399d0cef3900c78d1a10f6d7140bcfc.exe windows x86
f5635913355d1117744649770235eb5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteFileW
CreateFileW
GetVolumePathNameA
GetFileAttributesA
GetModuleFileNameA
SetFilePointer
GetModuleHandleA
GlobalFlags
FindAtomW
GetCurrentThreadId
LeaveCriticalSection
IsValidLocale
VirtualProtectEx
HeapDestroy
GetProcessVersion
OpenMutexA
SetFileTime
OpenEventW
DeleteFileW
CreateDirectoryA
CreateFileW
GetTickCount
PulseEvent
InterlockedExchange
GetDriveTypeW
user32
DestroyIcon
IsMenu
MessageBoxA
SetRect
SetFocus
DispatchMessageA
GetWindowLongA
GetWindowLongA
PeekMessageA
DestroyMenu
LoadCursorA
wsprintfA
GetWindowTextA
dpnhpast
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
advapi32
IsValidAcl
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE