Static task
static1
Behavioral task
behavioral1
Sample
89a6e766ebc0bffed0969fc701efe445cd6ce84b870685ddae1ecd4253bcd305.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89a6e766ebc0bffed0969fc701efe445cd6ce84b870685ddae1ecd4253bcd305.exe
Resource
win10v2004-20220812-en
General
-
Target
89a6e766ebc0bffed0969fc701efe445cd6ce84b870685ddae1ecd4253bcd305
-
Size
277KB
-
MD5
3a6c723dae03f225595e7dbd26eb3049
-
SHA1
b782e3ef42ea18958a82a23cd9eb5ae405bf1211
-
SHA256
89a6e766ebc0bffed0969fc701efe445cd6ce84b870685ddae1ecd4253bcd305
-
SHA512
94d04fa6b4e85541cc9ecada9c6095d8bf09ad08801f96cc46e7849a77d36867ba980995f6cce6df7f65e7c3a0f5bf353380e449cde83c04c51fcac1aacddb6a
-
SSDEEP
6144:Y5YxtnYczTfutSRHty6WfRQemw/0N721Nwox9/bwkWEEqV:+Wt1z+SjuQemS1GI9jqG
Malware Config
Signatures
Files
-
89a6e766ebc0bffed0969fc701efe445cd6ce84b870685ddae1ecd4253bcd305.exe windows x86
a33073d1b279e25e8f56435561e940a8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
MessageBoxA
advapi32
RegQueryValueExA
oleaut32
SysFreeString
mpr
WNetOpenEnumA
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
shell32
Shell_NotifyIconA
wininet
InternetReadFile
wsock32
WSACleanup
winmm
waveOutWrite
avicap32
capCreateCaptureWindowA
msacm32
acmFormatChooseA
ws2_32
WSAIoctl
Sections
.data Size: - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 266KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE