Static task
static1
Behavioral task
behavioral1
Sample
89c4c9fd55c7c5d68fb52688b00c12d29b4537e2c8bfcd987ebf4a1b8c7cbc5f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89c4c9fd55c7c5d68fb52688b00c12d29b4537e2c8bfcd987ebf4a1b8c7cbc5f.exe
Resource
win10v2004-20220901-en
General
-
Target
89c4c9fd55c7c5d68fb52688b00c12d29b4537e2c8bfcd987ebf4a1b8c7cbc5f
-
Size
386KB
-
MD5
329975284bb63cef4d666b00b5eebc3d
-
SHA1
fb2af919131938cc808043a02bc05802d41ce2b7
-
SHA256
89c4c9fd55c7c5d68fb52688b00c12d29b4537e2c8bfcd987ebf4a1b8c7cbc5f
-
SHA512
0480eec303cd4b526c104c2f5bfc1067ee288c2b4f5d07358f65ac97bc3d1323f35b50a26a30dc768597608911708e1ed28d602f35ae3d994b34575ec56d4af6
-
SSDEEP
6144:WkoKT3jUf9DIDmV8VF8oIwIfppmuyT78LUa7Z7L3S2:ptqDIxVpNii78oaV7Li2
Malware Config
Signatures
Files
-
89c4c9fd55c7c5d68fb52688b00c12d29b4537e2c8bfcd987ebf4a1b8c7cbc5f.exe windows x86
6b9dfaf4f65177b006d85698ddb30c97
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
WriteConsoleW
WideCharToMultiByte
UnhandledExceptionFilter
TerminateProcess
SetUnhandledExceptionFilter
SetThreadUILanguage
QueryPerformanceCounter
LocalFree
GetSystemTimeAsFileTime
GetStdHandle
GetFileType
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
VirtualAlloc
GetConsoleOutputCP
GetConsoleMode
FormatMessageW
GetLastError
GetDriveTypeW
GetCommandLineW
GetTickCount
GetFileAttributesW
GetModuleHandleA
user32
IsCharUpperW
GetWindowTextLengthA
CharLowerA
IsCharUpperA
DestroyWindow
AnyPopup
VkKeyScanW
GetMenuContextHelpId
GetDlgItem
IsCharLowerW
CountClipboardFormats
GetParent
IsWindowVisible
GetDoubleClickTime
DestroyMenu
IsGUIThread
SetWindowLongW
CharNextW
GetSysColor
GetKBCodePage
GetClipboardViewer
LoadCursorFromFileA
GetActiveWindow
GetAsyncKeyState
GetSystemMetrics
IsCharAlphaW
GetClipboardSequenceNumber
SendMessageW
gdi32
CloseEnhMetaFile
GetLayout
GetDCPenColor
CreateCompatibleDC
GetMapMode
StrokePath
GetTextCharacterExtra
SaveDC
DeleteObject
GetTextCharset
AbortPath
GetObjectType
SetMetaRgn
GetSystemPaletteUse
GetDCBrushColor
SelectObject
DeleteEnhMetaFile
AbortDoc
GetStretchBltMode
PathToRegion
advapi32
RegOpenKeyExA
RegQueryValueExW
msvcrt
_XcptFilter
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_adjust_fdiv
_c_exit
_cexit
_except_handler3
_exit
_initterm
exit
setlocale
wcscmp
Sections
.text Size: 378KB - Virtual size: 377KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ