Static task
static1
Behavioral task
behavioral1
Sample
c989f9a06d7370d095add762b6f57e421a5dbb7c9ebfc4d5a34df38317d52044.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c989f9a06d7370d095add762b6f57e421a5dbb7c9ebfc4d5a34df38317d52044.exe
Resource
win10v2004-20220812-en
General
-
Target
c989f9a06d7370d095add762b6f57e421a5dbb7c9ebfc4d5a34df38317d52044
-
Size
99KB
-
MD5
1228ed99c349b5cbad11ee4c8210e6df
-
SHA1
89308cd9131aec5a2655e6a756614903188151bd
-
SHA256
c989f9a06d7370d095add762b6f57e421a5dbb7c9ebfc4d5a34df38317d52044
-
SHA512
b7eb3780acd0679079d0c5e195144777de35e34bb48b731f5dc5a8b2672ccb804b7d636e59e41a25084bce165cf03973ab7c0e319026d63617df8aa353ee5755
-
SSDEEP
1536:+UkguuEPP49JATYB91CLQwYASG/r+uejcD6iNXR0Yk/T1B:lkgZE0JNB914PLSWruoDxh0Y
Malware Config
Signatures
Files
-
c989f9a06d7370d095add762b6f57e421a5dbb7c9ebfc4d5a34df38317d52044.exe windows x86
99cde96ec32dbaae6b1847f6d3cbb0e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
Sleep
GetFileTime
GetCurrentProcessId
CopyFileW
CreateProcessA
GetCPInfo
GetCommandLineA
OpenFile
GetCurrentThread
ExitThread
GetOEMCP
GetCurrentThreadId
CreateThread
GetFileSize
GetCurrentProcess
OpenFile
GetCommandLineA
GetFileTime
CreateThread
GetCPInfo
DeleteFileA
ExitThread
FindAtomA
GetUserDefaultLangID
CreateDirectoryA
GetCurrentThreadId
GetComputerNameA
GetFileSize
GetLastError
GetCurrentThread
DeleteAtom
GetUserDefaultLCID
CreateThread
GetCommandLineA
GetLastError
CreateProcessA
ExitThread
GetUserDefaultLangID
GlobalFree
GetComputerNameA
GetCurrentThread
GetFileSize
GetFileTime
GetConsoleMode
Sleep
GetStdHandle
DeleteFileW
GetCurrentThreadId
DeleteFileA
GetStdHandle
OpenFile
FindFirstFileA
GetCurrentProcess
CreateThread
GetUserDefaultLangID
GetCurrentThreadId
ExitProcess
GetCPInfo
GetConsoleMode
DeleteFileW
DeleteAtom
GetCurrentProcessId
GetConsoleOutputCP
CreateDirectoryA
GlobalFree
Sleep
GetFileSize
DeleteFileA
GetCurrentProcessId
GetFileSize
ExitProcess
DeleteFileW
GetCurrentThreadId
GetConsoleOutputCP
GetCPInfo
CreateDirectoryA
OpenFile
GetStdHandle
FindAtomA
GetOEMCP
GetComputerNameA
GetCommandLineA
GetCurrentProcess
DeleteFileA
GetConsoleMode
GetStdHandle
DeleteAtom
ExitProcess
CreateProcessA
GetConsoleOutputCP
GetCurrentThread
FindFirstFileA
DeleteFileW
Sleep
GetFileSize
CreateThread
GetUserDefaultLangID
OpenFile
CreateDirectoryA
GetCPInfo
CreateDirectoryA
GetStdHandle
GetCurrentThread
ExitThread
DeleteAtom
GetCurrentThreadId
GetConsoleMode
OpenFile
GetCurrentProcess
FindFirstFileA
GetOEMCP
GetFileTime
CreateProcessA
GetConsoleOutputCP
ExitProcess
Sleep
GetCurrentProcess
GetLastError
GetConsoleMode
GetConsoleOutputCP
GetCurrentThread
DeleteAtom
GetUserDefaultLangID
GetCurrentProcessId
GetOEMCP
DeleteFileW
CreateProcessA
GetFileSize
user32
AppendMenuW
CloseWindow
EndDialog
InsertMenuA
IsMenu
LoadCursorA
GetWindowTextLengthA
CopyImage
LoadMenuA
DialogBoxParamA
DrawTextW
DialogBoxParamW
CopyRect
CreateIcon
CopyIcon
DrawIconEx
GetWindowTextA
AlignRects
GetDlgItem
DrawTextW
IsMenu
AppendMenuW
CopyRect
GetCursor
AppendMenuA
DrawTextA
BlockInput
LoadMenuA
AlignRects
CloseWindow
CalcMenuBar
DialogBoxParamW
DialogBoxParamA
LoadCursorA
EndDialog
CopyIcon
advapi32
RegQueryValueExW
RegQueryValueW
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExW
RegCreateKeyExA
RegEnumKeyW
RegDeleteValueW
RegOpenKeyA
RegEnumValueA
RegDeleteKeyW
RegOpenKeyExW
RegGetKeySecurity
RegEnumKeyA
Sections
.itext Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.init Size: 44KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ