Static task
static1
Behavioral task
behavioral1
Sample
89d5134ea0ed0b27ffddeae15af7c6361a06e036a8ec77474ab944ecbf7e2ef5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89d5134ea0ed0b27ffddeae15af7c6361a06e036a8ec77474ab944ecbf7e2ef5.exe
Resource
win10v2004-20221111-en
General
-
Target
89d5134ea0ed0b27ffddeae15af7c6361a06e036a8ec77474ab944ecbf7e2ef5
-
Size
769KB
-
MD5
6d600ee8ace0c7a07caa0d1cda5c8e73
-
SHA1
f09ccda325df2e1125f100cadee4c7cba3087607
-
SHA256
89d5134ea0ed0b27ffddeae15af7c6361a06e036a8ec77474ab944ecbf7e2ef5
-
SHA512
fcdc3fbd2cc3e7ae9750cbabac6e7dc21444f7ef4b37534e211a67fcdf97d89eefdec9feb2b6fbf55cf6b42fdd5bc34602c28026b03317c6231841618bc8f755
-
SSDEEP
12288:wmylgomednz+q446bIg0jsADwshavS0aY+Cz0kK0upJTaK:wmKmeVzt446sfjZDwQ8S3eQJ
Malware Config
Signatures
Files
-
89d5134ea0ed0b27ffddeae15af7c6361a06e036a8ec77474ab944ecbf7e2ef5.exe windows x86
f48f4668530fb446ee39d86e02582da2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryW
Sleep
GetTickCount
GetPriorityClass
LoadLibraryA
SetLastError
GetProcessHeap
GetFileAttributesA
CreateHardLinkW
SetEvent
GlobalFree
CreateMutexW
DeleteFileW
GetStdHandle
GetStartupInfoA
ReadConsoleW
GetLocalTime
VirtualProtect
HeapSize
CreateSemaphoreA
SetLastError
wintrust
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
traffic
TcDeleteFilter
TcDeleteFlow
TcAddFlow
TcAddFilter
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 761KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE