Static task
static1
Behavioral task
behavioral1
Sample
89ab042f608aebac203494b6d1346273cf89e1568cd00db345be0be971a32413.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89ab042f608aebac203494b6d1346273cf89e1568cd00db345be0be971a32413.exe
Resource
win10v2004-20220812-en
General
-
Target
89ab042f608aebac203494b6d1346273cf89e1568cd00db345be0be971a32413
-
Size
60KB
-
MD5
4927d7edd45853929fcd8d7cc1817b17
-
SHA1
417ac5a79dde1eab8274449c71c503c0bee96cae
-
SHA256
89ab042f608aebac203494b6d1346273cf89e1568cd00db345be0be971a32413
-
SHA512
869e3d1bdc8272100865f28827ea2a8bd65e7198d0703d4a74a2717e1877986eacaf928e78b3895776ae7fafa3b67931c1c26425e6acf902f03cb1e028c8d74a
-
SSDEEP
1536:F0r4cQBnDYha1YUsKyw9KWTiWhi8yn9H3K9:arCBnDYha1TXyz1nNa9
Malware Config
Signatures
Files
-
89ab042f608aebac203494b6d1346273cf89e1568cd00db345be0be971a32413.exe windows x86
644c625dbe727aed8203259448f73750
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
msvbvm60
EVENT_SINK_GetIDsOfNames
Sections
pec1 Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pec2 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�pec Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE