Static task
static1
Behavioral task
behavioral1
Sample
089a276ef7ec47d6b984f95b24c8ded117b62a1ff759d4adc2fad0f89093808c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
089a276ef7ec47d6b984f95b24c8ded117b62a1ff759d4adc2fad0f89093808c.exe
Resource
win10v2004-20220812-en
General
-
Target
089a276ef7ec47d6b984f95b24c8ded117b62a1ff759d4adc2fad0f89093808c
-
Size
368KB
-
MD5
d23a1969990d5de99cbdaec2bc74e2e7
-
SHA1
8fe5719840dcd9c380870a8a841b36af35e366f0
-
SHA256
089a276ef7ec47d6b984f95b24c8ded117b62a1ff759d4adc2fad0f89093808c
-
SHA512
e01301263ecfdfbc6b6af768ed4919e2ff47d065936caff4974f1bac8e6724a7f1c19eadd78033354c7fdeb93b0177fad51dfac1eac8fd732f02fac692746070
-
SSDEEP
6144:dAseuZNzL5zhgbX77dmqobbIVUzubMBww1LapvZ7mDyTjLk7bD:d6uZPhgL77i8VqubMT1LmqEq
Malware Config
Signatures
Files
-
089a276ef7ec47d6b984f95b24c8ded117b62a1ff759d4adc2fad0f89093808c.exe windows x86
139eee625bffd24b34508b189d140955
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CallNextHookEx
TrackPopupMenu
MessageBoxW
ShowWindow
PackDDElParam
RegisterClassA
VkKeyScanExW
CreateWindowExW
RegisterClassExA
KillTimer
MapVirtualKeyW
LoadMenuIndirectW
DefWindowProcA
CloseClipboard
DdeCreateDataHandle
ValidateRgn
ShowCursor
FlashWindow
DestroyWindow
TileChildWindows
CreateWindowExA
AdjustWindowRectEx
UnhookWindowsHook
DrawTextExA
gdi32
EnumEnhMetaFile
GetKerningPairsW
GetCharABCWidthsFloatA
SetWorldTransform
CancelDC
TextOutA
SetMapperFlags
RemoveFontResourceW
GetRandomRgn
FillPath
GetOutlineTextMetricsW
UpdateICMRegKeyA
kernel32
GetEnvironmentStrings
GetConsoleMode
GetStartupInfoW
GetModuleHandleA
InitializeCriticalSection
LoadLibraryA
SetConsoleCtrlHandler
HeapReAlloc
ReadConsoleOutputAttribute
GetLastError
TlsSetValue
FlushFileBuffers
FreeLibrary
Sleep
GetLocaleInfoW
LCMapStringA
EnumSystemLocalesA
GetConsoleOutputCP
ExitProcess
TlsGetValue
HeapCreate
LCMapStringW
SetUnhandledExceptionFilter
GetDateFormatA
GetNamedPipeInfo
GetLocaleInfoA
GetCurrentThreadId
WriteConsoleW
GetModuleFileNameW
WriteFile
IsDebuggerPresent
UnhandledExceptionFilter
InterlockedExchange
GetStdHandle
GetCurrentProcess
GetProcessHeap
SetStdHandle
TerminateProcess
WideCharToMultiByte
CompareStringW
IsValidLocale
GetStartupInfoA
ReadFile
MultiByteToWideChar
TlsFree
WaitNamedPipeA
FreeEnvironmentStringsW
GetTimeZoneInformation
WriteConsoleA
SetHandleCount
OpenMutexA
FreeEnvironmentStringsA
HeapSize
SetLastError
GetOEMCP
HeapAlloc
GetEnvironmentStringsW
GetCommandLineW
WriteProfileSectionW
CloseHandle
InterlockedDecrement
GetFileType
InterlockedIncrement
GetCurrentThread
GetCPInfo
QueryPerformanceCounter
CreateMutexA
IsValidCodePage
VirtualAlloc
RtlUnwind
ReadConsoleOutputCharacterW
GetVersionExA
VirtualFree
DeleteCriticalSection
GetConsoleCP
SetEnvironmentVariableA
ExitThread
CompareStringA
HeapDestroy
GetUserDefaultLCID
HeapFree
GetCommandLineA
ReadConsoleOutputA
EnumDateFormatsA
VirtualQuery
GetStringTypeW
VirtualLock
SetPriorityClass
TlsAlloc
GetProcAddress
LeaveCriticalSection
GetModuleFileNameA
GetCurrentProcessId
GetTickCount
SetFilePointer
GetStringTypeA
CreateFileA
GetACP
EnterCriticalSection
GetTimeFormatA
GetSystemTimeAsFileTime
wininet
InternetWriteFile
FindFirstUrlCacheEntryA
InternetOpenA
InternetErrorDlg
FtpGetFileSize
InternetCheckConnectionW
GopherGetAttributeW
advapi32
RegCreateKeyW
LookupSecurityDescriptorPartsW
RegEnumKeyExA
comdlg32
PageSetupDlgW
FindTextW
ReplaceTextA
comctl32
CreateToolbarEx
DrawInsert
CreatePropertySheetPageW
CreatePropertySheetPageA
InitMUILanguage
ImageList_GetImageInfo
ImageList_Merge
ImageList_AddIcon
_TrackMouseEvent
ImageList_GetFlags
ImageList_SetIconSize
ImageList_LoadImageW
ImageList_Destroy
ImageList_Add
ImageList_DragShowNolock
ImageList_Duplicate
GetEffectiveClientRect
InitCommonControlsEx
ImageList_Replace
DrawStatusTextA
Sections
.text Size: 156KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ