Static task
static1
Behavioral task
behavioral1
Sample
989c5bd3f90aa6f805032e773ba2a84b4ad4493ef820a869f9d95a74416387b3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
989c5bd3f90aa6f805032e773ba2a84b4ad4493ef820a869f9d95a74416387b3.exe
Resource
win10v2004-20220812-en
General
-
Target
989c5bd3f90aa6f805032e773ba2a84b4ad4493ef820a869f9d95a74416387b3
-
Size
332KB
-
MD5
0e2e3039a53d10d8c4a33c422d85ad20
-
SHA1
dde22116a1a662b2a6ff559b74c18f8cbcefd88e
-
SHA256
989c5bd3f90aa6f805032e773ba2a84b4ad4493ef820a869f9d95a74416387b3
-
SHA512
643472a60d1427cef38532e2a6df5be4b89f398be324be35fe40a90e04a7e13a3677447f2419dc24381ebc02d09ba4a9bba9988630c273fdce51d9384d2f4186
-
SSDEEP
6144:s6rg3sQQH26g0xiahLR+3+gOCBSo021SZHmZUQ4K:s6rOsQQW6gDaxReBW21eHmZUQ4
Malware Config
Signatures
Files
-
989c5bd3f90aa6f805032e773ba2a84b4ad4493ef820a869f9d95a74416387b3.exe windows x86
8fcce37049bb58eff6317e5c8fa1c5c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsCharUpperA
IsCharAlphaA
GetDlgCtrlID
EqualRect
SetWindowRgn
FindWindowW
GetClipboardOwner
MapVirtualKeyExW
GetInputDesktop
DrawFocusRect
GetTabbedTextExtentW
DdeAddData
CharToOemA
RemoveMenu
VkKeyScanW
LoadCursorA
ChangeDisplaySettingsExW
GetMenu
DrawTextW
SetDlgItemInt
ModifyMenuA
AppendMenuA
DrawAnimatedRects
MonitorFromWindow
InvalidateRgn
PackDDElParam
CreateDialogParamW
DdeAbandonTransaction
CreateIconFromResource
CreateDialogIndirectParamA
RemovePropA
DefWindowProcA
LoadStringA
GetMenuItemInfoW
RegisterClassExA
InflateRect
DdeKeepStringHandle
IsDialogMessageW
FreeDDElParam
GetWindowLongW
ReleaseCapture
GetMenuCheckMarkDimensions
RegisterDeviceNotificationA
RegisterClassA
ScrollDC
FrameRect
ReuseDDElParam
GetClassInfoA
GetClassNameW
TrackMouseEvent
WinHelpW
ChangeDisplaySettingsExA
SwitchDesktop
GetKeyboardLayoutNameW
LookupIconIdFromDirectory
RegisterClassW
GetPropW
CountClipboardFormats
MessageBeep
CreateDialogParamA
DrawFrameControl
SetMenuContextHelpId
ExcludeUpdateRgn
InSendMessageEx
GetDoubleClickTime
shell32
SHGetPathFromIDListW
ExtractIconA
DragQueryFileAorW
ExtractIconExW
ExtractAssociatedIconExW
comdlg32
PrintDlgA
PageSetupDlgW
kernel32
CreateMutexA
DeleteCriticalSection
GetCommandLineW
GlobalGetAtomNameW
LeaveCriticalSection
GetOEMCP
HeapDestroy
SetFilePointer
HeapAlloc
GetStdHandle
HeapReAlloc
GetStartupInfoA
GetLastError
GetTimeFormatA
CreateMailslotW
OpenMutexA
GetCommandLineA
GetVersionExA
GetCurrentThreadId
GetSystemInfo
GetFileSize
SetHandleCount
GetFileType
MultiByteToWideChar
TerminateProcess
GetTickCount
GetCPInfo
CloseHandle
VirtualAlloc
GetEnvironmentStringsW
VirtualFree
GetEnvironmentStrings
GetTimeZoneInformation
FlushFileBuffers
GetStringTypeW
GetStartupInfoW
IsBadWritePtr
WriteFile
GetCurrentThread
GetLocaleInfoW
GetUserDefaultLCID
RtlUnwind
HeapCreate
GetModuleFileNameA
GetSystemTimeAsFileTime
CompareStringA
WideCharToMultiByte
InitializeCriticalSection
InterlockedExchange
GetACP
GetModuleHandleA
VirtualProtect
CompareStringW
QueryPerformanceCounter
GetLocaleInfoA
GetCurrentProcessId
FreeEnvironmentStringsW
LoadLibraryW
HeapFree
TlsFree
GetProcAddress
SetEnvironmentVariableA
SetLastError
GetCurrentProcess
UnhandledExceptionFilter
ExitProcess
GetStringTypeA
CreateSemaphoreA
VirtualQuery
TlsSetValue
SetStdHandle
LCMapStringA
EnumSystemLocalesA
TlsAlloc
LCMapStringW
FreeEnvironmentStringsA
IsValidCodePage
SetVolumeLabelA
EnterCriticalSection
HeapSize
GetModuleFileNameW
IsValidLocale
FindNextFileA
GetCompressedFileSizeW
TlsGetValue
ReadFile
LoadLibraryA
GetDateFormatA
wininet
FindFirstUrlCacheEntryExW
HttpCheckDavCompliance
comctl32
ImageList_BeginDrag
CreatePropertySheetPageA
ImageList_Merge
GetEffectiveClientRect
ImageList_Add
InitCommonControlsEx
CreateUpDownControl
ImageList_GetIcon
advapi32
LookupAccountSidA
LookupPrivilegeValueW
RegDeleteKeyA
CryptGenKey
CryptSignHashA
CryptEnumProviderTypesA
RegSetValueA
CryptContextAddRef
CryptHashSessionKey
CryptCreateHash
CryptGetDefaultProviderA
LookupSecurityDescriptorPartsA
InitiateSystemShutdownA
RegQueryMultipleValuesW
RegConnectRegistryA
CryptGetKeyParam
RegLoadKeyW
CryptDeriveKey
CryptSetProviderExW
Sections
.text Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ