Static task
static1
Behavioral task
behavioral1
Sample
89f51e8e12a288eca4111d3ce34157d94c29876034f89677274d10c3bfb4d496.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
89f51e8e12a288eca4111d3ce34157d94c29876034f89677274d10c3bfb4d496.exe
Resource
win10v2004-20220812-en
General
-
Target
89f51e8e12a288eca4111d3ce34157d94c29876034f89677274d10c3bfb4d496
-
Size
114KB
-
MD5
9366f9a6341a701681ad04548e5f6ab0
-
SHA1
e2d266ff816cd876179bd363fe31692068314ad9
-
SHA256
89f51e8e12a288eca4111d3ce34157d94c29876034f89677274d10c3bfb4d496
-
SHA512
82dc1de153a129ebbc37589e1fc2d523b869cbfa63619ef0875ad30cdbd274b411432241f1eaea2fb1d049664e3b5d2d5dcce8f5f635a88c4b7128cb0f96a6ea
-
SSDEEP
1536:hLMeI8WrIEgLfVpPySzSpHUPMtckVLViEoSfbsLzasnTfVmaA17TRwSBZ9yPtw0x:hAxKVyS2xcUromsDzVmZ1lBZsVwM
Malware Config
Signatures
Files
-
89f51e8e12a288eca4111d3ce34157d94c29876034f89677274d10c3bfb4d496.exe windows x86
4d809684695d2bc799e4d34070769f5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileTime
GetStartupInfoA
lstrlenW
lstrcpyW
ReadFile
CloseHandle
IsBadCodePtr
WriteConsoleW
ReleaseMutex
FindResourceA
GetCurrentDirectoryA
GetModuleHandleA
WriteConsoleW
GetLastError
WriteConsoleW
HeapCreate
IsValidLocale
GetFileAttributesA
SetPriorityClass
GetFileSize
IsBadStringPtrA
msftedit
SetCustomTextOutHandlerEx
RichComboBoxWndProc
RichEditWndProc
RichListBoxWndProc
uxtheme
GetThemeBool
SetWindowTheme
DrawThemeEdge
IsThemeActive
CloseThemeData
CloseThemeData
GetThemeTextMetrics
GetThemeColor
OpenThemeData
GetThemeSysSize
GetThemeTextExtent
GetWindowTheme
DrawThemeBackground
msasn1
ASN1BERDecEoid
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 1024B - Virtual size: 49B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE