Static task
static1
Behavioral task
behavioral1
Sample
89ed7627320ed204317acabeea5d43d967f9e880d0ca8d74c6e318ea45612dde.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89ed7627320ed204317acabeea5d43d967f9e880d0ca8d74c6e318ea45612dde.exe
Resource
win10v2004-20220812-en
General
-
Target
89ed7627320ed204317acabeea5d43d967f9e880d0ca8d74c6e318ea45612dde
-
Size
3.4MB
-
MD5
b7a8dc552a975b4adc1709561de66adb
-
SHA1
1fade61ab28e2223bfcbed937732120e24f83e8e
-
SHA256
89ed7627320ed204317acabeea5d43d967f9e880d0ca8d74c6e318ea45612dde
-
SHA512
850e15475c00929bc9d5c2a47f75d230f01e3dfcd56036df3f2d11ce07e1b1c04b5d87e24651a5ac0d066506055da8e16d58a2ea4b6736b2922fe18fe4e42874
-
SSDEEP
98304:WR7XePg4xPibmdKjrrfoq/1DoPz+lz6ppWPwT:s8xPibmnq/Ro6O1T
Malware Config
Signatures
Files
-
89ed7627320ed204317acabeea5d43d967f9e880d0ca8d74c6e318ea45612dde.exe windows x86
c9749513208288305099900ce01b1603
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
ExitProcess
lstrcatA
lstrcpyA
RemoveDirectoryA
DeleteFileA
FreeLibrary
CloseHandle
GetProcAddress
LoadLibraryA
WriteFile
CreateFileA
lstrcmpA
lstrlenA
GetFileAttributesA
GetTempPathA
GetModuleHandleA
GetFileSize
GetModuleFileNameA
VirtualAlloc
VirtualFree
user32
wsprintfA
MessageBoxA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.gentee Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ