Static task
static1
Behavioral task
behavioral1
Sample
89dd206a63a8b8279c20a2bb172f072f6fbcec7f60335f140ceeef7512c71bb2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89dd206a63a8b8279c20a2bb172f072f6fbcec7f60335f140ceeef7512c71bb2.exe
Resource
win10v2004-20220901-en
General
-
Target
89dd206a63a8b8279c20a2bb172f072f6fbcec7f60335f140ceeef7512c71bb2
-
Size
75KB
-
MD5
5251fa7a4e9334a52f910a00a5bff55e
-
SHA1
fc962eae8dd697ef1604967aec06dadbb2e97e73
-
SHA256
89dd206a63a8b8279c20a2bb172f072f6fbcec7f60335f140ceeef7512c71bb2
-
SHA512
e417ef00a3e1b744db5323580c03f99dd73bafe34f3d129897d8e4c04361e969c8bf7f2d976e9dceee6d2b239f416f94593e55cb07a9609b629521d6c5d36511
-
SSDEEP
1536:Jj8d0xHjiifOBqvUlEhHJCaSKhQR5yJBV3L+lfDTw:Jj8d0BiifO+hHJCxSAgBkw
Malware Config
Signatures
Files
-
89dd206a63a8b8279c20a2bb172f072f6fbcec7f60335f140ceeef7512c71bb2.exe windows x86
8d1f3607f6f644aa45436b6badedcfb7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateProcessA
ExitProcess
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetModuleFileNameA
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
IsBadReadPtr
LoadLibraryA
VirtualAllocEx
VirtualFree
VirtualProtect
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 20B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 492B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE