Static task
static1
Behavioral task
behavioral1
Sample
89f54c2c3fd236f35e7db216018555babfc501c520e618ccbf754eedaa4332d8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
89f54c2c3fd236f35e7db216018555babfc501c520e618ccbf754eedaa4332d8.exe
Resource
win10v2004-20221111-en
General
-
Target
89f54c2c3fd236f35e7db216018555babfc501c520e618ccbf754eedaa4332d8
-
Size
1.4MB
-
MD5
57a93860f87758b91b796e93663fedbe
-
SHA1
a12f46bda66d634c9ee4a1516dea7f0ebd5d1f22
-
SHA256
89f54c2c3fd236f35e7db216018555babfc501c520e618ccbf754eedaa4332d8
-
SHA512
54bcf6086da3bca6d766a4bc266aa95085822afbe73a4b40756b451aabca9abc420054f08395eef092ced60be0904a4b298fde2c2cf40c066958bacd5215965d
-
SSDEEP
24576:ek3K3vcXqVa3WjdyN2stK7wbEWWJ7ad3opxIiVhbWMBwi+9EQIu3N:eP3vl6tEwbE4Oxh1QI+
Malware Config
Signatures
Files
-
89f54c2c3fd236f35e7db216018555babfc501c520e618ccbf754eedaa4332d8.exe windows x86
d447a013aa9b39533b41622527e0611b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSASocketA
kernel32
LocalReAlloc
user32
GetWindowThreadProcessId
gdi32
SaveDC
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
advapi32
RegOpenKeyA
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameA
oledlg
ord8
ole32
CoTaskMemFree
oleaut32
VariantCopy
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
shell32
SHGetFolderPathW
Sections
.text Size: 259KB - Virtual size: 592KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ