Static task
static1
Behavioral task
behavioral1
Sample
88c7c0522adca504b5a46f6f96f405f7b024bca8cf9754f07330d0a773399c9f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
88c7c0522adca504b5a46f6f96f405f7b024bca8cf9754f07330d0a773399c9f.exe
Resource
win10v2004-20220901-en
General
-
Target
88c7c0522adca504b5a46f6f96f405f7b024bca8cf9754f07330d0a773399c9f
-
Size
444KB
-
MD5
516e1c36d236325a6d6f9def36a91710
-
SHA1
5aac7a5ae92c3161a7b077279e2e744123345c00
-
SHA256
88c7c0522adca504b5a46f6f96f405f7b024bca8cf9754f07330d0a773399c9f
-
SHA512
f5310709b656020d99e1ae0f046adfea22c2746d685ddf2a4b52ab06e9c9a32f40a223bb4c2cd6c609bbb60e4e7d528123f7e9cc4e321b09e4d2a6d709250d54
-
SSDEEP
12288:x0RAd/GKr3ea2Hru4I2RojHq93VAqizxA4:uRAdZOa2HzHR0HqB2zxA
Malware Config
Signatures
Files
-
88c7c0522adca504b5a46f6f96f405f7b024bca8cf9754f07330d0a773399c9f.exe windows x86
d2aaa47c18ff5d056d6ae9e80aa54d60
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
BitBlt
SetTextColor
CreateCompatibleDC
GetStockObject
kernel32
FindClose
DeleteCriticalSection
WriteConsoleW
GetSystemTimeAsFileTime
SetEndOfFile
TerminateProcess
WriteConsoleA
InterlockedDecrement
ReleaseMutex
RaiseException
HeapFree
FileTimeToLocalFileTime
VirtualFree
IsDebuggerPresent
GetStringTypeA
GetEnvironmentStringsW
GetCPInfo
HeapDestroy
EnterCriticalSection
SetEvent
CreateDirectoryA
TlsFree
InitializeCriticalSection
UnmapViewOfFile
GetStringTypeW
SetStdHandle
GetStartupInfoW
Sleep
CloseHandle
TlsSetValue
HeapReAlloc
GetVersionExA
InterlockedExchange
InterlockedCompareExchange
UnhandledExceptionFilter
FileTimeToSystemTime
SetEnvironmentVariableA
SetLastError
GetProcAddress
LoadLibraryW
InterlockedIncrement
GetEnvironmentStrings
DeleteFileA
MapViewOfFile
GetCommandLineW
LoadLibraryA
GetCommandLineA
LeaveCriticalSection
GetOEMCP
LocalFree
LocalAlloc
GetACP
DuplicateHandle
FlushFileBuffers
FindNextFileW
GetConsoleMode
GetProcessHeap
CreateProcessW
GlobalLock
GlobalFree
WriteFile
GetStdHandle
CreateThread
LockResource
LoadResource
SetUnhandledExceptionFilter
GetSystemInfo
FreeLibrary
LoadLibraryExW
CreateEventA
CompareStringW
SetHandleCount
lstrcmpA
lstrlenA
WideCharToMultiByte
lstrcmpiA
GetConsoleCP
GetLocaleInfoA
GetConsoleOutputCP
GlobalUnlock
GlobalAlloc
GetSystemDirectoryA
GetDiskFreeSpaceA
VirtualAlloc
HeapSize
GetCurrentProcess
HeapAlloc
VirtualQuery
GetFileAttributesW
FindFirstFileA
TlsGetValue
LCMapStringW
LCMapStringA
TlsAlloc
GetVersion
ReadFile
GetCurrentProcessId
CreateMutexA
WaitForSingleObject
MultiByteToWideChar
CreateFileA
CreateEventW
GetCurrentThreadId
GetModuleFileNameW
GetTickCount
GetFileAttributesA
FindResourceW
GetModuleHandleA
MulDiv
CreateFileMappingA
GetModuleFileNameA
GetFileType
GetModuleHandleW
GetFileSize
FindFirstFileW
GetTimeZoneInformation
CreateFileW
HeapCreate
SizeofResource
FormatMessageA
GetCurrentDirectoryA
SetFilePointer
lstrlenW
GetTempPathA
GetLastError
ExitProcess
QueryPerformanceCounter
FreeEnvironmentStringsA
lstrcatA
GetStartupInfoA
CreateProcessA
DeleteFileW
lstrcpynA
GetThreadLocale
user32
SetForegroundWindow
PostQuitMessage
SetTimer
RegisterClassA
PeekMessageA
LoadIconA
GetClientRect
GetMessageA
DefWindowProcA
GetWindowLongA
LoadCursorA
IsWindow
SendMessageA
TranslateMessage
DispatchMessageA
BeginPaint
LoadStringA
ReleaseDC
GetDC
ClientToScreen
SetWindowLongA
GetSystemMetrics
GetWindow
GetDesktopWindow
SetWindowTextA
CreateWindowExA
SetFocus
MessageBoxA
FillRect
GetCursorPos
GetSysColor
IsWindowVisible
GetDlgItem
GetParent
EnableWindow
SetCursor
UnregisterClassA
CallWindowProcA
DestroyWindow
InvalidateRect
ScreenToClient
PostMessageA
advapi32
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
OpenProcessToken
RegCloseKey
RegDeleteKeyA
GetTokenInformation
Sections
.text Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 372KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ