Static task
static1
Behavioral task
behavioral1
Sample
9089584afe0e355f80cee5ec2f285781b432ca9eaf924be7aa09c5225bfd1596.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9089584afe0e355f80cee5ec2f285781b432ca9eaf924be7aa09c5225bfd1596.exe
Resource
win10v2004-20221111-en
General
-
Target
9089584afe0e355f80cee5ec2f285781b432ca9eaf924be7aa09c5225bfd1596
-
Size
311KB
-
MD5
13ff406a7c10e1a64bd56b34e2c7f380
-
SHA1
afef90989d56c08313d94d68dc4bc2180fa844f0
-
SHA256
9089584afe0e355f80cee5ec2f285781b432ca9eaf924be7aa09c5225bfd1596
-
SHA512
eb66bb75290963116deb4ab6432ffdaf3ac5c1ece9b468185bb054dfd7c5a8f7b8166fa4828c524b0f03dff6dd6627c0c6fc35f3c4620a83360085c4356ee15f
-
SSDEEP
6144:nFuhIBO4JpGb7gAKxvSM0iGXm28dmlHjncmZVTLVtASjU7ukPzyYwIEc+wsbyy1N:nF2IF0nRKxvSM0ig9hVTBLjwuYOYlENX
Malware Config
Signatures
Files
-
9089584afe0e355f80cee5ec2f285781b432ca9eaf924be7aa09c5225bfd1596.exe windows x86
56830acd52b54542c55af6e2a9948b43
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
ReadFile
FormatMessageW
GetFileSize
SetFileTime
lstrcatA
IsBadWritePtr
GetLastError
lstrcpyA
CreateMutexW
GetStartupInfoW
InitializeCriticalSection
LeaveCriticalSection
GetLocalTime
SetFileTime
SetFileAttributesW
FindResourceA
CloseHandle
SetFileTime
HeapCreate
GetModuleHandleW
msi
MsiCloseHandle
MsiCreateRecord
MsiCloseAllHandles
MsiAdvertiseProductA
user32
DispatchMessageA
SetFocus
GetWindowRect
IsZoomed
PostMessageW
PeekMessageW
LoadCursorW
IsWindow
GetWindowTextA
wsprintfW
SetCursorPos
GetWindowLongW
IsDialogMessageA
wldap32
ldap_add
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rich Size: 1KB - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE