Static task
static1
Behavioral task
behavioral1
Sample
88b590913a19dcb2a57b358ac6f3f3dc82c8c4e0d7e5f04e05e1ee229b378b2b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
88b590913a19dcb2a57b358ac6f3f3dc82c8c4e0d7e5f04e05e1ee229b378b2b.exe
Resource
win10v2004-20220812-en
General
-
Target
88b590913a19dcb2a57b358ac6f3f3dc82c8c4e0d7e5f04e05e1ee229b378b2b
-
Size
202KB
-
MD5
4a1bf9264e19825997f19917c7a8e601
-
SHA1
ace095c73f222fd044a0e9dee794e64d02e70be7
-
SHA256
88b590913a19dcb2a57b358ac6f3f3dc82c8c4e0d7e5f04e05e1ee229b378b2b
-
SHA512
16dce8c5ec989a27372785e0db18533dbaae3e981a5aeaf4e5aa8c2606f793986d2a42db27f34d0416f7e5107ad081f2e9ca861b79ef4590abf884934ad472a2
-
SSDEEP
6144:1Qmc2EOym//6/cH2m23kOiU/jU0Smo6KkGi6uTQMT:ObLBcH2j7Ur63GvuTQMT
Malware Config
Signatures
Files
-
88b590913a19dcb2a57b358ac6f3f3dc82c8c4e0d7e5f04e05e1ee229b378b2b.exe windows x86
0478ef52aaaf4111b12a1f797ab30fb0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetWindowsDirectoryA
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateDirectoryA
CopyFileA
GetCurrentProcessId
GetLastError
VirtualAlloc
GetExpandedNameA
LocalCompact
GlobalFlags
FormatMessageW
BaseInitAppcompatCacheSupport
EnumTimeFormatsW
SetupComm
IsBadStringPtrA
GetProcAddress
LockFile
WritePrivateProfileStructA
SetErrorMode
ProcessIdToSessionId
FindFirstVolumeMountPointA
ScrollConsoleScreenBufferW
SetConsoleNumberOfCommandsA
SetLastError
DisconnectNamedPipe
AttachConsole
FlushFileBuffers
GetPriorityClass
SetVolumeMountPointW
GetModuleHandleW
ReadConsoleOutputW
FindNextVolumeMountPointA
CreateMemoryResourceNotification
GetNamedPipeInfo
GetFileInformationByHandle
SearchPathA
GetNumberOfConsoleMouseButtons
CreateConsoleScreenBuffer
SetThreadPriority
CreateJobObjectA
LCMapStringA
PrepareTape
IsValidLanguageGroup
WaitForDebugEvent
GetTempFileNameA
FreeEnvironmentStringsA
FindFirstVolumeMountPointW
GlobalMemoryStatus
GetVolumeNameForVolumeMountPointW
ReleaseMutex
VirtualLock
RtlCaptureStackBackTrace
SetFilePointerEx
RequestDeviceWakeup
VirtualProtect
ClearCommBreak
RegisterWaitForInputIdle
GetDiskFreeSpaceExW
lstrcatW
FreeConsole
DosPathToSessionPathW
GetNumaProcessorNode
VerifyConsoleIoHandle
FindActCtxSectionGuid
OpenConsoleW
GetVolumePathNameA
MoveFileWithProgressW
SetConsoleCursorMode
GetComPlusPackageInstallStatus
GetSystemTimeAdjustment
GetVolumePathNamesForVolumeNameA
GetVersion
GetModuleHandleA
advapi32
RegCloseKey
RegSetValueExA
RegQueryValueExA
user32
wsprintfA
CreateMenu
CreateDialogParamA
GetDC
setupapi
SetupDiGetClassInstallParamsA
SetupCopyOEMInfA
SetupCloseInfFile
SetupGetLineTextA
SetupFindNextLine
SetupFindFirstLineA
SetupOpenInfFileA
SetupDiGetDriverInfoDetailA
SetupDiGetSelectedDriverA
CM_Get_Sibling
CM_Get_Parent
CM_Get_Child
CM_Open_DevNode_Key
CM_Get_DevNode_Registry_PropertyA
CM_Locate_DevNodeA
CM_Disable_DevNode
CM_Enable_DevNode
CM_Setup_DevNode
comctl32
InitCommonControls
InitCommonControlsEx
ImageList_BeginDrag
ImageList_GetBkColor
ImageList_ReplaceIcon
ImageList_SetBkColor
InitializeFlatSB
ImageList_DragMove
ImageList_SetDragCursorImage
ImageList_LoadImageA
CreateMappedBitmap
UninitializeFlatSB
ole32
OleInitialize
ComPs_NdrDllGetClassObject
CoInitializeEx
HMENU_UserMarshal
SetErrorInfo
HBITMAP_UserSize
DcomChannelSetHResult
StgIsStorageFile
OleSetAutoConvert
CoUnmarshalHresult
CoGetApartmentID
CoUnmarshalInterface
StgCreatePropStg
CoInitializeSecurity
HDC_UserMarshal
CreateItemMoniker
OleRegGetUserType
HMETAFILEPICT_UserUnmarshal
IsValidInterface
CLIPFORMAT_UserMarshal
HGLOBAL_UserSize
STGMEDIUM_UserMarshal
CoGetObject
MonikerCommonPrefixWith
GetErrorInfo
CoGetCallContext
OleInitializeWOW
HMETAFILE_UserUnmarshal
OleLoadFromStream
CoCreateInstance
ReadFmtUserTypeStg
GetHGlobalFromStream
OleGetIconOfFile
CoReleaseMarshalData
OleCreateDefaultHandler
OleCreateStaticFromData
IsAccelerator
DllRegisterServer
FreePropVariantArray
ComPs_NdrDllRegisterProxy
gdi32
CreateCompatibleBitmap
SetBrushOrgEx
EnumFontFamiliesA
AnyLinkedFonts
GetStockObject
GetMetaFileA
RemoveFontMemResourceEx
DdEntry55
CreateFontIndirectExW
DdEntry6
GetFontResourceInfoW
AddFontResourceA
EngDeletePalette
SetDeviceGammaRamp
SetBitmapBits
StretchDIBits
GdiPlayPageEMF
GdiAddGlsBounds
CreateScalableFontResourceW
GetBkMode
CreateBrushIndirect
SetPaletteEntries
GetEnhMetaFileHeader
GetOutlineTextMetricsW
GetOutlineTextMetricsA
GdiConvertAndCheckDC
GetCharWidth32W
STROBJ_bGetAdvanceWidths
GetMetaFileBitsEx
GdiPlayJournal
CreateDIBPatternBrushPt
GetEnhMetaFileBits
GetPixel
GdiEntry6
RoundRect
gdiPlaySpoolStream
GetTextMetricsA
ColorCorrectPalette
DeleteColorSpace
EndDoc
CombineTransform
EngLoadModule
SetWindowOrgEx
DeleteObject
GetObjectType
DdEntry19
DdEntry20
GdiFixUpHandle
GetDeviceGammaRamp
GdiConvertFont
DdEntry15
GetLogColorSpaceW
GetTextExtentPoint32A
GdiConvertToDevmodeW
XLATEOBJ_iXlate
DdEntry12
GetStringBitmapA
GetEnhMetaFileW
EngStrokePath
CreateEnhMetaFileW
GdiGetPageCount
GetBitmapBits
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.icode Size: 4KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 151KB - Virtual size: 355KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ