Static task
static1
Behavioral task
behavioral1
Sample
89486b5a718454c279b370d2f0ad98ead65fb1426659c2b6bfb41736246134b3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
89486b5a718454c279b370d2f0ad98ead65fb1426659c2b6bfb41736246134b3.exe
Resource
win10v2004-20221111-en
General
-
Target
89486b5a718454c279b370d2f0ad98ead65fb1426659c2b6bfb41736246134b3
-
Size
620KB
-
MD5
449eef4464a6e62ffadb120e7ae381b3
-
SHA1
6a6c9a97f084fe25a1d60e22cd8b6e5761011eb6
-
SHA256
89486b5a718454c279b370d2f0ad98ead65fb1426659c2b6bfb41736246134b3
-
SHA512
061632c08b45bf3fc2bd0b289d6468927628a3e00daca2235daa1ee66af20e5f18164a75975b46cc8f53e71b976438ddc6cfc4335dc7d89ec517186a0ccc5b55
-
SSDEEP
12288:STPeIACMPisKBSwG4v2OGDchnH+VYbp+tLZsNRuhPR0+M10aUX0IImtBlV:oPBACBBt2OGgNtpCimpFuUGw
Malware Config
Signatures
Files
-
89486b5a718454c279b370d2f0ad98ead65fb1426659c2b6bfb41736246134b3.exe windows x86
232813ffd53bed671c8c21731178a7bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteObject
BitBlt
GetDeviceCaps
CreateCompatibleBitmap
DeleteDC
GetStockObject
CreateCompatibleDC
SetTextColor
SelectObject
CreateSolidBrush
SetBkColor
oleaut32
VariantClear
VariantInit
SysAllocString
SysFreeString
advapi32
RegQueryInfoKeyA
RegDeleteKeyA
RegSetValueExA
RegDeleteValueW
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
ole32
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
kernel32
RtlUnwind
GetStdHandle
GetConsoleOutputCP
ReleaseMutex
FileTimeToSystemTime
GetFileAttributesA
WaitForSingleObject
VirtualAlloc
FindResourceA
IsBadReadPtr
Sleep
VirtualFree
HeapCreate
IsValidCodePage
TlsGetValue
CreateProcessA
SizeofResource
GetVersion
GetModuleHandleW
GlobalLock
GetACP
lstrcpynA
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
GetConsoleMode
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCPInfo
GetCommandLineW
LockResource
GetCurrentProcessId
GetEnvironmentStrings
CreateProcessW
lstrlenW
GlobalAlloc
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
UnmapViewOfFile
LoadLibraryExW
GetLastError
LeaveCriticalSection
HeapAlloc
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CreateEventW
ExpandEnvironmentStringsA
WaitForMultipleObjects
DuplicateHandle
RemoveDirectoryA
FindFirstFileW
CreateFileMappingA
ResetEvent
CompareStringA
FindFirstFileA
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
DeleteFileW
SetEvent
GetStartupInfoW
GetWindowsDirectoryA
DeleteFileA
CreateDirectoryA
LCMapStringW
GetFileSize
GetStartupInfoA
FreeLibrary
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
GetOEMCP
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
SetCurrentDirectoryA
InterlockedIncrement
GetCurrentThreadId
SetEndOfFile
VirtualQuery
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
SetFileAttributesA
CreateThread
GetModuleHandleA
CreateMutexA
MultiByteToWideChar
UnhandledExceptionFilter
LoadLibraryExA
GetModuleFileNameA
FlushFileBuffers
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
InitializeCriticalSection
GetSystemTime
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
GetEnvironmentVariableA
FormatMessageW
LocalFree
GetExitCodeProcess
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
WriteFile
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
lstrcmpiA
SetStdHandle
FreeEnvironmentStringsW
SetErrorMode
lstrcatA
LocalAlloc
GetLocaleInfoA
GetCurrentDirectoryA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
FindNextFileA
user32
ReleaseDC
DispatchMessageA
GetDC
PostQuitMessage
DestroyMenu
SetForegroundWindow
IsWindow
SetWindowPos
CheckMenuItem
SetCursor
CallWindowProcA
GetClientRect
SendMessageA
InvalidateRect
IsWindowVisible
PtInRect
SystemParametersInfoA
GetSysColor
DialogBoxParamA
MessageBoxA
SetDlgItemTextA
MessageBeep
EndDialog
DrawTextA
GetDesktopWindow
TrackPopupMenu
LoadIconA
LoadCursorA
ScreenToClient
GetDlgItem
CreateWindowExA
wsprintfA
SetWindowTextA
PostMessageA
GetWindowRect
GetSystemMetrics
DefWindowProcA
KillTimer
BeginPaint
IsIconic
SetFocus
EndPaint
FillRect
SetTimer
GetWindowLongA
RegisterClassA
EnableMenuItem
LoadStringA
GetWindow
IsWindowEnabled
PeekMessageA
EnableWindow
SetCapture
ShowWindow
UpdateWindow
GetParent
DestroyWindow
TranslateMessage
GetCursorPos
Sections
.text Size: 540KB - Virtual size: 537KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ