Static task
static1
Behavioral task
behavioral1
Sample
689396d52d05e5be580189d3b8bb343e55c4b216a92952488660148290479e00.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
689396d52d05e5be580189d3b8bb343e55c4b216a92952488660148290479e00.exe
Resource
win10v2004-20220812-en
General
-
Target
689396d52d05e5be580189d3b8bb343e55c4b216a92952488660148290479e00
-
Size
144KB
-
MD5
fed374b3cc02fe3ed95cf7313f26d3d9
-
SHA1
c6b2e74a5ffbb8b3629bd67927fa8c8d05f6a296
-
SHA256
689396d52d05e5be580189d3b8bb343e55c4b216a92952488660148290479e00
-
SHA512
5a224736f7856c22098a6f3350511a97bd449c54c9282a9075d4dd891b1fc607680013ed0464ea647ed2ee3cda0e33711387fc77cafa7ebc72c06d20b8e957cb
-
SSDEEP
3072:gKBXgzQFqlu+/BFyh0pImGC0ETNjjVWfv4nThvxmPTHtGfvxjsxjn:g2gMg4+/OI0EpjjWv4nT5sbNGfan
Malware Config
Signatures
Files
-
689396d52d05e5be580189d3b8bb343e55c4b216a92952488660148290479e00.exe windows x86
ccdccb99e54adc5430a95e6f2fdad5e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceFrequency
EnumTimeFormatsW
FoldStringA
GetLocaleInfoW
WritePrivateProfileStructW
GetStringTypeExW
VirtualQueryEx
GetCommMask
DeleteVolumeMountPointA
GetModuleHandleA
GetStartupInfoA
PrepareTape
LocalSize
GetCurrentProcessId
WritePrivateProfileStringA
msvcrt
_adjust_fdiv
_acmdln
__set_app_type
_wspawnlp
wcstol
_wfsopen
_exit
_initterm
_snwscanf
__getmainargs
difftime
_wstrtime
__p__fmode
_controlfp
_mbctoupper
__setusermatherr
wcstombs
_XcptFilter
_isatty
_ismbcl2
exit
_mbsnbicoll
__p__commode
_except_handler3
user32
GetTabbedTextExtentA
GetMenuInfo
DefWindowProcA
PtInRect
SetClipboardViewer
GetMenuState
SetClassLongA
EnumPropsExA
MonitorFromWindow
EmptyClipboard
DdeInitializeA
gdi32
GetRegionData
SetArcDirection
UpdateColors
GetCharWidthFloatA
SetPolyFillMode
GetKerningPairsA
SetROP2
Sections
.text Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ