Static task
static1
Behavioral task
behavioral1
Sample
89c130e952b269285b1a8cd3e50bbbd294985fcd06d6c79d1ada95c09de5d3e9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89c130e952b269285b1a8cd3e50bbbd294985fcd06d6c79d1ada95c09de5d3e9.exe
Resource
win10v2004-20220812-en
General
-
Target
89c130e952b269285b1a8cd3e50bbbd294985fcd06d6c79d1ada95c09de5d3e9
-
Size
193KB
-
MD5
0c13fd9dd36c3977141700cbbb16a5b3
-
SHA1
7e2a3d2e0ea9bdc80bfe3b3d9d82f985a7a65e8d
-
SHA256
89c130e952b269285b1a8cd3e50bbbd294985fcd06d6c79d1ada95c09de5d3e9
-
SHA512
13e8cffcf06be0d4a382ed979bbf85b07499a57118fe42e5563df34e77f504d2884c71ab3265256e9d59a78ec9423fb88d1afb9c57330ac58450b06f67a09592
-
SSDEEP
6144:KslOO510Sb4jEIUGdq71EzC0i2yYH1Kzb43yZAI:/OOAh/dq71Ez1/Kz8iZA
Malware Config
Signatures
Files
-
89c130e952b269285b1a8cd3e50bbbd294985fcd06d6c79d1ada95c09de5d3e9.exe windows x86
8426b68b01224ad6cb98d0c0d1ebc162
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadStringPtrW
LoadResource
GetUserGeoID
VirtualQueryEx
CheckRemoteDebuggerPresent
SetComputerNameExA
GetSystemDirectoryW
EnumSystemLanguageGroupsW
WriteConsoleA
TlsSetValue
DefineDosDeviceW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 174KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE