Static task
static1
Behavioral task
behavioral1
Sample
f89f2448c3498cbf55f869f9b04d818e160462b29b1ee16166ec8ee116839546.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f89f2448c3498cbf55f869f9b04d818e160462b29b1ee16166ec8ee116839546.exe
Resource
win10v2004-20220812-en
General
-
Target
f89f2448c3498cbf55f869f9b04d818e160462b29b1ee16166ec8ee116839546
-
Size
123KB
-
MD5
11ddaf14fa6a92102bc0ad03b9d01e9f
-
SHA1
6f7a4d97e51cfe1ec614ca950676b658a446ee27
-
SHA256
f89f2448c3498cbf55f869f9b04d818e160462b29b1ee16166ec8ee116839546
-
SHA512
cc85543ea1fb1206e0b718e6cb6480febc80e2fafde017c08d12f59f72ba910912f0990b19b8a24d21e3987263925d59152bf04eb54f180b0a1387dbbe063b32
-
SSDEEP
3072:o1yJ2h2HO6B4mCh0YHL5McE+upiAtMdXqMX:o1yJjO6umCbL5MdpiAtMrX
Malware Config
Signatures
Files
-
f89f2448c3498cbf55f869f9b04d818e160462b29b1ee16166ec8ee116839546.exe windows x86
d942db757bdbc916751a5284081074cd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
CreateFileA
GetFileType
GetModuleHandleW
LoadLibraryA
GetTempPathW
FindClose
CloseHandle
GetTempPathA
GetModuleHandleA
GetStartupInfoA
user32
CloseClipboard
IsWindowVisible
EmptyClipboard
DeleteMenu
DefWindowProcW
IsWindowEnabled
DrawTextA
BeginPaint
GetWindowTextW
ShowWindow
CloseWindow
DefWindowProcA
DestroyWindow
GetWindow
DrawTextW
GetWindowTextA
EnableWindow
GetWindowRect
gdi32
DeleteDC
GetStockObject
Rectangle
oleaut32
SafeArrayCopy
SafeArrayCreate
SysAllocStringLen
GetErrorInfo
SysAllocStringByteLen
SetErrorInfo
CreateErrorInfo
SysAllocString
SysFreeString
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strcmp
Sections
.text Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ