Static task
static1
Behavioral task
behavioral1
Sample
89d15884897b787b49714c1a13514a524c57ece1aff584952f3c5838dfe70b10.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89d15884897b787b49714c1a13514a524c57ece1aff584952f3c5838dfe70b10.exe
Resource
win10v2004-20221111-en
General
-
Target
89d15884897b787b49714c1a13514a524c57ece1aff584952f3c5838dfe70b10
-
Size
150KB
-
MD5
8c681a1cdf8fec0d1cb207b4f64f823b
-
SHA1
0492de70ff692f577ee7a9514d4c224c8b92df7c
-
SHA256
89d15884897b787b49714c1a13514a524c57ece1aff584952f3c5838dfe70b10
-
SHA512
937992cd20e79214bd6cfa8345627ecf5776d2aaf1d989da4e9e72a8fe4489a7f62b5ae529c67108615eeff0c7a4e0538464b794d9d5a6ba7dac13968bbcd9f4
-
SSDEEP
3072:xEMAUghWL/RUNhrUKiI3OODhy3mLKQqwB9ZC4hLg/u1gv9RHg:xEMXgZvrKI3Jhy3MqwzZCaLg/ukTA
Malware Config
Signatures
Files
-
89d15884897b787b49714c1a13514a524c57ece1aff584952f3c5838dfe70b10.exe windows x86
d1c42816d4eb9c2415e9ceaf07e320d8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeConsole
EraseTape
FindFirstVolumeW
GetVolumeNameForVolumeMountPointA
SetCommTimeouts
GetModuleHandleA
GetWindowsDirectoryW
GetThreadContext
WaitForMultipleObjectsEx
GetDiskFreeSpaceW
SetProcessShutdownParameters
RtlUnwind
GetStartupInfoA
MultiByteToWideChar
GetSystemDefaultUILanguage
CopyFileW
GetLargestConsoleWindowSize
msvcrt
_mbsicoll
_wcslwr
wscanf
__set_app_type
_exit
__getmainargs
_mbcjmstojis
_ftol
_except_handler3
__setusermatherr
_wtoi64
_adjust_fdiv
memcpy
_mbsninc
__p__fmode
exit
_initterm
_controlfp
_acmdln
_sys_nerr
_getdllprocaddr
_XcptFilter
_adj_fdivr_m64
_ismbcl0
__p__commode
_ismbbkalnum
Sections
.text Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ