Static task
static1
Behavioral task
behavioral1
Sample
89c180d653a27b3a4e1692d8a3e4202cf9e0dbef4e0f209d3c150f3421a8b26e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
89c180d653a27b3a4e1692d8a3e4202cf9e0dbef4e0f209d3c150f3421a8b26e.exe
Resource
win10v2004-20220901-en
General
-
Target
89c180d653a27b3a4e1692d8a3e4202cf9e0dbef4e0f209d3c150f3421a8b26e
-
Size
745KB
-
MD5
325a92428b0cbfd55ec055cb68e35c9a
-
SHA1
210952f384c234b865d0ce9b1270dcde991ff9f7
-
SHA256
89c180d653a27b3a4e1692d8a3e4202cf9e0dbef4e0f209d3c150f3421a8b26e
-
SHA512
423b95123073b71351eba705b2e277c512337010811b767a080ae6635e7071175bcdf2b476dd1d7634fbc6fb36acd2d10f743a12fb1b319d72d94d623c38a22e
-
SSDEEP
12288:eAONUfL6NeW0m7v8P6rksH+Zm8UpnI0EPd+vaGeazRZhJCeP3SVOL7i:eAOGD6NeOoXlEnI0PaH8DhJfiW
Malware Config
Signatures
Files
-
89c180d653a27b3a4e1692d8a3e4202cf9e0dbef4e0f209d3c150f3421a8b26e.exe windows x86
7042e7c54748f8fea6c7b63d1877c13e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
FindAtomW
SetLastError
ReadFile
DeleteFileW
GetFileAttributesA
SetLastError
CreateFileA
IsBadReadPtr
RemoveDirectoryA
GetCurrentDirectoryA
GetCommandLineA
SetFileAttributesW
SetEndOfFile
SuspendThread
VirtualAlloc
GetFileSize
ExitProcess
CloseHandle
WaitForSingleObject
GetVersion
GetModuleHandleA
GetEnvironmentVariableA
EnterCriticalSection
HeapSize
cryptui
CryptUIWizImport
LocalEnroll
LocalEnrollNoDS
CryptUIWizDigitalSign
CryptUIDlgViewContext
DllRegisterServer
CryptUIDlgFreeCAContext
CryptUIWizBuildCTL
CryptUIDlgFreeCAContext
DllUnregisterServer
CryptUIDlgFreeCAContext
CryptUIDlgSelectStoreA
CryptUIWizExport
cmpbk32
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 737KB - Virtual size: 737KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ