Static task
static1
Behavioral task
behavioral1
Sample
89d23b109b876160b4ae0fd389fb6329868dd4f858b17e7943472072dbd602a9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89d23b109b876160b4ae0fd389fb6329868dd4f858b17e7943472072dbd602a9.exe
Resource
win10v2004-20220812-en
General
-
Target
89d23b109b876160b4ae0fd389fb6329868dd4f858b17e7943472072dbd602a9
-
Size
826KB
-
MD5
58ab266fbcd4f5d850dbfb88cb929090
-
SHA1
f20f707242ad4396c1635bc20147349db7b54d42
-
SHA256
89d23b109b876160b4ae0fd389fb6329868dd4f858b17e7943472072dbd602a9
-
SHA512
56d2a562a05927c78cb48574899b17e2835fc9c85f5a6c6a29fda3d8024c5a023fa80100d3f875fd3b305daa4f9e6f22acb3ec2f543a37531594b49d6175adaf
-
SSDEEP
12288:bNMbZp+ePDuKlbE5aV5lpVblaSey2cfCkZ3TA:bNMbDuMA5w5jicfCk
Malware Config
Signatures
Files
-
89d23b109b876160b4ae0fd389fb6329868dd4f858b17e7943472072dbd602a9.exe windows x86
0fb48e5d4189541b388f1d9aa685a689
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetEnhMetaFileDescriptionA
BeginPath
CreateBrushIndirect
FlattenPath
GetRandomRgn
SetBkColor
SetBkColor
SetBkColor
SetBkColor
SetBkColor
SetBkColor
EnableEUDC
TextOutW
CreateCompatibleDC
RemoveFontResourceW
SetBkColor
CreateBrushIndirect
SetBkColor
SetBkColor
AddFontResourceExA
SetPaletteEntries
SetBkColor
SetBkColor
SetBkColor
SetBkColor
SetBkColor
GetCharacterPlacementW
SetBkColor
SetBkColor
GetTextExtentPointI
SetBkColor
SetMiterLimit
GetICMProfileW
CreateMetaFileW
SetBkColor
CreateScalableFontResourceW
SwapBuffers
TextOutA
SetBkColor
DeleteEnhMetaFile
SetBkColor
SetBkColor
SetBkColor
PolylineTo
SetBkColor
SetBkColor
GetClipBox
GetKerningPairsA
SetBkColor
SetBkColor
SetBkColor
SetBkColor
CreateRoundRectRgn
SetBkColor
SetBkColor
GdiGetBatchLimit
LPtoDP
SetBkColor
CreateEnhMetaFileA
SetBitmapBits
SetBkColor
GdiPlayEMF
SetBkColor
kernel32
EndUpdateResourceW
BuildCommDCBAndTimeoutsA
RemoveDirectoryA
GetDriveTypeA
GetDriveTypeA
FindClose
GetAtomNameW
GetDriveTypeA
GetDriveTypeA
SetCommTimeouts
GetDriveTypeA
EnumDateFormatsW
GlobalAddAtomW
EnumSystemCodePagesW
LocalUnlock
GetDriveTypeA
SetSystemPowerState
GetDriveTypeA
GetDriveTypeA
GetStringTypeExW
PostQueuedCompletionStatus
GetDriveTypeA
WritePrivateProfileStructW
GlobalUnfix
OpenSemaphoreA
GetDriveTypeA
GetDriveTypeA
GetDriveTypeA
GetDriveTypeA
GetDriveTypeA
GetDriveTypeA
GetDriveTypeA
SwitchToFiber
SearchPathA
GetComputerNameA
SetProcessShutdownParameters
GetDriveTypeA
GetDriveTypeA
GetPrivateProfileSectionA
GetDriveTypeA
GetDriveTypeA
GetDriveTypeA
GetDriveTypeA
_lopen
SuspendThread
GetDriveTypeA
GetProcessWorkingSetSize
GetDriveTypeA
GetDateFormatA
GetDriveTypeA
GetDriveTypeA
SetStdHandle
GetDriveTypeA
FlushViewOfFile
ReadConsoleOutputAttribute
_lopen
GetQueuedCompletionStatus
GetFullPathNameA
GetTempFileNameA
CreateMutexA
DefineDosDeviceW
ReadConsoleInputW
GetDriveTypeA
CreateSemaphoreA
CompareStringA
GetDriveTypeA
GetDriveTypeA
user32
GetMenuItemInfoA
GrayStringW
GetSystemMetrics
GetKeyboardLayoutList
GetDlgItem
GetKeyboardType
GetParent
SubtractRect
UnregisterHotKey
GetKeyboardType
ReuseDDElParam
GetKeyboardType
DefWindowProcW
CopyAcceleratorTableW
ShowCursor
GetKeyboardType
GetParent
GetScrollInfo
GetClassLongA
OffsetRect
TileChildWindows
GetParent
GetParent
EnumDesktopWindows
GetSystemMetrics
UnionRect
LoadBitmapW
GetKeyboardType
GetSystemMetrics
GetParent
GetKeyboardType
GetSystemMetrics
GetKeyboardType
GetSystemMetrics
GetDlgItem
EnumClipboardFormats
PostThreadMessageW
GetKeyboardType
GetDlgItem
GetSystemMetrics
GetParent
LoadCursorW
GetParent
GetParent
GetDlgItem
GetSystemMetrics
GetDlgItem
GetKeyboardType
GetKeyboardType
CreateWindowStationA
GetSystemMetrics
SetCapture
SetWindowLongW
CallNextHookEx
GetKeyboardType
RegisterClassW
GetNextDlgTabItem
LoadAcceleratorsW
GetWindowTextW
EnumDisplayMonitors
IsWindow
SetClipboardViewer
GetParent
TranslateMessage
GetSystemMetrics
GetDlgItem
GetDlgItemTextA
GetSystemMetrics
GetWindowTextW
GetParent
Sections
.xmwe Size: 211KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ppts Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wykf Size: 9KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bkke Size: 12KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.trfd Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 580KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE