Static task
static1
Behavioral task
behavioral1
Sample
589d8762964542747047b3181d36bdec616d766675956cb3b63779875dcc83c3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
589d8762964542747047b3181d36bdec616d766675956cb3b63779875dcc83c3.exe
Resource
win10v2004-20221111-en
General
-
Target
589d8762964542747047b3181d36bdec616d766675956cb3b63779875dcc83c3
-
Size
252KB
-
MD5
16199b5dbd2ee12a9e36a76e68550d20
-
SHA1
02b076999d4f86c12c04e571d929a3967fd18909
-
SHA256
589d8762964542747047b3181d36bdec616d766675956cb3b63779875dcc83c3
-
SHA512
fb83fc7aeee0cc45ebb47d8fda614bd230fea3cb37cdf024e5bf71b713546d506a3d3745cb95c51a5abd6aae40bc966f24bb4dd7943d32cb4bc2ee8d0141f50d
-
SSDEEP
6144:07z5EnMLuBokizElgI40/kR0u1GnwGVmPJHiHI5Kerws9VwbG62srq71:MhLuBo/Qlv43SyQrVmPhiqTwby71
Malware Config
Signatures
Files
-
589d8762964542747047b3181d36bdec616d766675956cb3b63779875dcc83c3.exe windows x86
b0943468ecf1ffe265fe90e6f61608e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegCreateKeyA
RegCreateKeyExW
RegDeleteKeyW
RegEnumValueW
RegOpenKeyW
RegQueryValueExA
RegQueryValueExW
RegQueryValueW
RegSetValueExW
RegSetValueW
kernel32
CloseHandle
CreateFileMappingW
CreateFileW
EnterCriticalSection
ExitProcess
InitializeCriticalSection
LeaveCriticalSection
MapViewOfFile
ReadFile
SetFilePointer
SetUnhandledExceptionFilter
UnmapViewOfFile
WriteFile
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memcpy
realloc
signal
sprintf
sscanf
strcpy
wcscpy
user32
AdjustWindowRectEx
BeginPaint
BringWindowToTop
CallWindowProcW
ChangeDisplaySettingsW
CloseClipboard
CopyRect
CreateDialogIndirectParamW
CreateMenu
CreatePopupMenu
CreateWindowExW
DefFrameProcW
DefWindowProcW
DestroyCursor
DestroyMenu
DestroyWindow
DispatchMessageW
DrawEdge
DrawIconEx
DrawStateW
EmptyClipboard
EnableWindow
EndPaint
EnumDisplaySettingsW
FlashWindow
GetActiveWindow
GetAsyncKeyState
GetCapture
GetClassInfoW
GetClassNameW
GetClipboardData
GetClipboardFormatNameW
GetDC
GetDlgItem
GetForegroundWindow
GetMenuItemCount
GetMenuItemInfoW
GetMenuStringW
GetMessagePos
GetMessageW
GetParent
GetSubMenu
GetSysColor
GetSystemMetrics
GetUpdateRect
GetWindow
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
HideCaret
InvalidateRect
IsDialogMessageW
IsWindow
IsWindowVisible
LoadBitmapW
LoadCursorFromFileW
LoadCursorW
LoadIconW
LoadImageW
MapWindowPoints
MessageBeep
MessageBoxW
MoveWindow
MsgWaitForMultipleObjects
OffsetRect
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
RegisterClassW
ReleaseCapture
ReleaseDC
SendMessageW
SetCapture
SetClipboardData
SetCursor
SetCursorPos
SetForegroundWindow
SetWindowRgn
SetWindowTextW
ShowCaret
ShowCursor
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnionRect
UnregisterClassW
UpdateWindow
WaitForInputIdle
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 37KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ