Static task
static1
Behavioral task
behavioral1
Sample
89c913842ddaf00f746998d14a613b2941ce6317d7ad514d94a5333275635efc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89c913842ddaf00f746998d14a613b2941ce6317d7ad514d94a5333275635efc.exe
Resource
win10v2004-20220812-en
General
-
Target
89c913842ddaf00f746998d14a613b2941ce6317d7ad514d94a5333275635efc
-
Size
628KB
-
MD5
150e10ad80b9bbbff7558674a62502c0
-
SHA1
684d58b6176d79eab7b18aec06663cb0e5c3d034
-
SHA256
89c913842ddaf00f746998d14a613b2941ce6317d7ad514d94a5333275635efc
-
SHA512
365f8e716c9e7e55b12c7eb4e55f323580e4b72aa57bce3faaafd45403399713f8997124bc547eb8cdd9fe39bcc3bba95f719704a773af312bc2bc215315e387
-
SSDEEP
12288:yob6EXgbAnCWuLgmCVRlca+mWQB5uPo/33vWKQa7TYzRpW39tV:1RQypNm4OY4CH7n3zV
Malware Config
Signatures
Files
-
89c913842ddaf00f746998d14a613b2941ce6317d7ad514d94a5333275635efc.exe windows x86
8d59a72dde2157544f2e025d239c8851
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterClassExA
EndDialog
PostMessageA
GetMessageA
DrawTextA
DispatchMessageA
CreateWindowExA
GetSystemMetrics
DefWindowProcA
SendMessageA
FillRect
DialogBoxParamA
kernel32
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
FreeLibrary
RaiseException
InterlockedCompareExchange
SetUnhandledExceptionFilter
QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
HeapCreate
Sleep
HeapSetInformation
GetCurrentThreadId
GetSystemTimeAsFileTime
GetCurrentProcess
GetCurrentProcessId
GetTickCount
lstrlenA
GetModuleHandleA
GetLastError
VirtualFree
RtlUnwind
WriteFile
LoadLibraryA
HeapFree
HeapAlloc
VirtualAlloc
GetProcAddress
InterlockedExchange
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
gdi32
CreateCompatibleBitmap
GetStockObject
CreatePen
CreateFontIndirectA
DeleteObject
CreateCompatibleDC
LineTo
GetTextExtentPoint32A
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
Sections
.text Size: 477KB - Virtual size: 477KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ