Static task
static1
Behavioral task
behavioral1
Sample
e889189dc47b4b6ff9b7831ce7b39ded2868a3464774c768ce84718746c76a7a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e889189dc47b4b6ff9b7831ce7b39ded2868a3464774c768ce84718746c76a7a.exe
Resource
win10v2004-20221111-en
General
-
Target
e889189dc47b4b6ff9b7831ce7b39ded2868a3464774c768ce84718746c76a7a
-
Size
164KB
-
MD5
5b2fc4dfaa988e3dfa8e0fb25453689b
-
SHA1
6cd4bbd446da9a22674464e6753eba3caf9226a6
-
SHA256
e889189dc47b4b6ff9b7831ce7b39ded2868a3464774c768ce84718746c76a7a
-
SHA512
bbc0ce7525e665b2caf3536ac4a0b6dddc08042614e9b861f2c05f0ac3be66cb3a2c960d76d6b540faf8d39c4b0ae45ac75ad80677645e7660ff02ff7855fd53
-
SSDEEP
3072:CqFqFwG+zRinZST5XOWT52ljZrR+m54fC5q5/foqa6+xwVI3SvvM:CqFqCdic5jiVrR+kZPNwVbM
Malware Config
Signatures
Files
-
e889189dc47b4b6ff9b7831ce7b39ded2868a3464774c768ce84718746c76a7a.exe windows x86
44c866b4ee55b6c7de191239dcaef6cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateDialogParamA
GetDlgCtrlID
GetDlgItemInt
ChildWindowFromPointEx
IsWindow
CreateWindowExA
ShowWindowAsync
AdjustWindowRect
GetWindow
GetForegroundWindow
SetParent
FindWindowA
ole32
CLSIDFromString
OleCreate
OleCreateLinkEx
OleSetMenuDescriptor
OleInitialize
CoRegisterSurrogate
CoSuspendClassObjects
CoCreateGuid
OleSetClipboard
OleCreateMenuDescriptor
ReadClassStg
CoResumeClassObjects
oledlg
ord12
ord2
ord5
ord11
ord1
ord10
ord4
ord6
ord8
ord3
ord7
ord9
oleaut32
LHashValOfNameSysA
kernel32
GetStartupInfoA
VirtualLock
VirtualProtectEx
HeapCreate
GlobalMemoryStatus
GetSystemDefaultLCID
SetEvent
DeleteCriticalSection
GetACP
HeapAlloc
GetProcAddress
VirtualAlloc
QueryPerformanceCounter
GetModuleHandleA
CompareStringA
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__setusermatherr
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 289KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ