Static task
static1
Behavioral task
behavioral1
Sample
c589c0b213412f77917c5f24e013605eb44d3c48a3ce8eee674e818f5987417b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c589c0b213412f77917c5f24e013605eb44d3c48a3ce8eee674e818f5987417b.exe
Resource
win10v2004-20220901-en
General
-
Target
c589c0b213412f77917c5f24e013605eb44d3c48a3ce8eee674e818f5987417b
-
Size
802KB
-
MD5
005a7990b43c72f397edebdc19a765d0
-
SHA1
2b924fc7b5ce966d2f5fe98d1441f4c7a1d57367
-
SHA256
c589c0b213412f77917c5f24e013605eb44d3c48a3ce8eee674e818f5987417b
-
SHA512
33af1be9ad36aa0b41368b393c24d6ac7f2fb91562c632987ed7c8f6dc7d9fb847613534623bd1ea6881a0f97899eaeb7f93e77997f69189a697104aa35cda58
-
SSDEEP
24576:tGLfRWEcfNQeMEbVuF8boerFwBy6V8KrquU9:gZW9Keta95yI8KWD9
Malware Config
Signatures
Files
-
c589c0b213412f77917c5f24e013605eb44d3c48a3ce8eee674e818f5987417b.exe windows x86
519ab351c5c54b8f9c5f87932249c3ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFlags
OpenEventA
InterlockedExchange
GetCurrentThreadId
FindAtomA
GetVolumePathNameA
GetDriveTypeW
SetFilePointer
CreateDirectoryA
GetModuleHandleA
CreateFileW
LocalFree
SetFileTime
PulseEvent
HeapDestroy
DeleteFileW
OpenMutexA
GetProcessHeap
VirtualProtectEx
DeleteFileW
GetConsoleMode
LeaveCriticalSection
GetFileAttributesA
GetModuleFileNameA
CreateFileW
user32
GetWindowLongA
GetWindowLongA
LoadCursorA
MessageBoxA
DestroyIcon
IsMenu
PeekMessageA
GetWindowTextA
SetFocus
wsprintfA
SetRect
DispatchMessageA
DestroyMenu
dot3gpclnt
LANGPADeInit
GenerateLANPolicy
LANGPAInit
ProcessLANPolicyEx
advapi32
IsValidAcl
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 794KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE