Static task
static1
Behavioral task
behavioral1
Sample
755de39a2d6eae9b0e30f71488d45326e5116c0244efad70887edf75e06bccee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
755de39a2d6eae9b0e30f71488d45326e5116c0244efad70887edf75e06bccee.exe
Resource
win10v2004-20220812-en
General
-
Target
755de39a2d6eae9b0e30f71488d45326e5116c0244efad70887edf75e06bccee
-
Size
305KB
-
MD5
50d33013247fafc00911e3fafbadb8c0
-
SHA1
ec90bb7346ac18aac0662ed2732b1e24f2c4396c
-
SHA256
755de39a2d6eae9b0e30f71488d45326e5116c0244efad70887edf75e06bccee
-
SHA512
8d22cf045d905ba0695f9e4c067e3591bc6572dd2abd5bbee7eb70c53a08ec103f3b35862d41a5dba7eac80da4fa0e305a9dfe0c5851742511914b83a13aba0f
-
SSDEEP
3072:kUAkCAVTvDi+O2mwbEueavSHp+M/+g6IEAU4fb4Kjj+AdGR+deTP4IDjsP:kUA7AlvowEueySHm4fbb++YTP4IDjsP
Malware Config
Signatures
Files
-
755de39a2d6eae9b0e30f71488d45326e5116c0244efad70887edf75e06bccee.exe windows x86
fc98d1020c6b9c002990d9307fe26b3f
Code Sign
2a:36:16:b7:04:9a:1c:69:b9:1f:26:f1:b0:1e:84:0aCertificate
IssuerCN=Install-Tech CANot Before28/04/2014, 16:02Not After31/12/2039, 23:59SubjectCN=Install-Teche6:df:19:69:ad:69:46:2d:d1:a5:5a:f8:d3:82:78:57:78:14:28:7fSigner
Actual PE Digeste6:df:19:69:ad:69:46:2d:d1:a5:5a:f8:d3:82:78:57:78:14:28:7fDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=Install-Tech03/10/2022, 12:52 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
MapViewOfFile
GetTickCount
Sleep
GetLastError
FreeLibrary
HeapAlloc
HeapFree
GetProcessHeap
LoadLibraryA
GetModuleHandleA
GetTempPathA
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
GetModuleHandleW
VirtualProtect
VirtualFree
GetProcAddress
VirtualAlloc
CloseHandle
GetVersionExW
GetFullPathNameW
CreateFileW
WriteConsoleW
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
SetFilePointerEx
GetConsoleCP
LoadLibraryExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetFilePointer
ReadConsoleW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineW
RaiseException
InitializeCriticalSectionAndSpinCount
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
HeapSize
IsDebuggerPresent
GetCurrentThreadId
GetStdHandle
WriteFile
GetModuleFileNameW
IsValidCodePage
GetACP
GetOEMCP
ReadFile
GetConsoleMode
VirtualQuery
user32
MessageBoxW
DestroyWindow
Sections
.text Size: 205KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ