Static task
static1
Behavioral task
behavioral1
Sample
89d25496e20c5d1c2851de581e5806dfc7a296dd40a612fac12cbd3f1d3b242e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89d25496e20c5d1c2851de581e5806dfc7a296dd40a612fac12cbd3f1d3b242e.exe
Resource
win10v2004-20220812-en
General
-
Target
89d25496e20c5d1c2851de581e5806dfc7a296dd40a612fac12cbd3f1d3b242e
-
Size
132KB
-
MD5
c87818e70efbe604fb57594d64f2c76b
-
SHA1
5bf32d462bdbe8b6cb062d67be088d608077e4d9
-
SHA256
89d25496e20c5d1c2851de581e5806dfc7a296dd40a612fac12cbd3f1d3b242e
-
SHA512
2333db847d92b4aa211f24bc5b3c85b15df410767e260454a978a86b0b8dabcde827f8e079c1b38582d9d637b565ba376efa04ede1fa5508fb57b103e9ec460d
-
SSDEEP
768:0MzE5L3jXodgytjqiB9sqiVQAN9lSo8fY/KzLZSKEk5Pk7f/P5s40qGMh0:Fod7otcqmPvEoAxXMh
Malware Config
Signatures
Files
-
89d25496e20c5d1c2851de581e5806dfc7a296dd40a612fac12cbd3f1d3b242e.exe windows x86
c0260f2de21d68e251eaa93fe54ad8bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
CreateFileA
LocalAlloc
GetFileSize
ReadFile
GetTickCount
CreateThread
SetHandleCount
GetStringTypeA
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
GetModuleFileNameA
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetProcAddress
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
ExitProcess
GlobalAlloc
GlobalFree
GetStringTypeW
LCMapStringA
LCMapStringW
lstrcpyA
CloseHandle
user32
GetMessageA
SendDlgItemMessageA
IsDialogMessageA
TranslateMessage
BeginPaint
EndPaint
SetDlgItemTextA
ReleaseDC
GetDC
ShowWindow
CreateDialogParamA
UpdateWindow
GetDlgItem
PostMessageA
LoadIconA
SetForegroundWindow
DefWindowProcA
TrackPopupMenu
GetWindowRect
EnableWindow
GetDlgItemInt
wsprintfA
SendMessageA
DestroyIcon
DestroyMenu
PostQuitMessage
DispatchMessageA
GetClientRect
FillRect
FrameRect
CreatePopupMenu
GetCursorPos
GetSystemMetrics
SetWindowPos
SetWindowLongA
SetWindowTextA
LoadBitmapA
AppendMenuA
GetSystemMenu
EnableMenuItem
DestroyWindow
GetDlgItemTextA
MessageBoxA
gdi32
SelectObject
DeleteObject
TextOutA
SetTextColor
CreateBrushIndirect
CreateFontA
SetBkMode
comdlg32
GetOpenFileNameA
shell32
Shell_NotifyIconA
ShellExecuteA
wsock32
WSAStartup
send
inet_ntoa
ioctlsocket
WSAAsyncSelect
socket
gethostbyaddr
gethostbyname
closesocket
WSACleanup
htons
connect
recv
comctl32
ord17
ord6
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ