Static task
static1
Behavioral task
behavioral1
Sample
284cbfdb98747231e6e21cfa26dae2e88f2ed4f903cfd50997cc58217765b8ee.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
284cbfdb98747231e6e21cfa26dae2e88f2ed4f903cfd50997cc58217765b8ee.exe
Resource
win10v2004-20220901-en
General
-
Target
284cbfdb98747231e6e21cfa26dae2e88f2ed4f903cfd50997cc58217765b8ee
-
Size
356KB
-
MD5
92471bb00d94b78819727ddb18dfbb70
-
SHA1
ce16161b97e7e052bd734e85cbe8fa7ff7ba39c8
-
SHA256
284cbfdb98747231e6e21cfa26dae2e88f2ed4f903cfd50997cc58217765b8ee
-
SHA512
94aaa9549939a0d7ea16b27b0f3e59bce5d45d5a5598fabffa6f8322a0afcc87f890fa6b208f17cab5f09d30a860e694a8ba14a1f0f46286f025cc9c92828477
-
SSDEEP
6144:zaxAmrJ2PsM4b5lKFuRnzmheB2LJIG5SaO6KtVu:mxAmrJ2PsMoLRseB21IG5SaO6oVu
Malware Config
Signatures
Files
-
284cbfdb98747231e6e21cfa26dae2e88f2ed4f903cfd50997cc58217765b8ee.exe windows x86
7e677300baf4e4574f1721a04849f258
Code Sign
3c:2e:38:1a:0d:d6:90:4d:b2:08:3f:7a:98:f9:34:36Certificate
IssuerCN=T-InstallNot Before06/04/2014, 13:54Not After31/12/2039, 23:59SubjectCN=T-Installerfc:6a:f5:85:73:0f:55:88:b3:c5:24:ce:99:cd:8f:65:b8:20:41:3bSigner
Actual PE Digestfc:6a:f5:85:73:0f:55:88:b3:c5:24:ce:99:cd:8f:65:b8:20:41:3bDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=T-Installer18/10/2022, 20:56 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
FreeLibrary
HeapAlloc
HeapFree
GetProcessHeap
LoadLibraryA
GetModuleHandleA
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
GetLastError
VirtualProtect
GetVersionExW
VirtualFree
GetProcAddress
VirtualAlloc
GetFullPathNameW
CloseHandle
Sleep
GetTickCount
MapViewOfFile
GetModuleHandleW
GetFileSize
WriteConsoleW
CreateFileW
GetConsoleCP
FlushFileBuffers
SetFilePointerEx
SetStdHandle
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineW
RaiseException
InitializeCriticalSectionAndSpinCount
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
HeapSize
GetCurrentThreadId
GetStdHandle
WriteFile
GetModuleFileNameW
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetConsoleMode
VirtualQuery
gdi32
CreateBitmap
SelectObject
CreateCompatibleDC
GetObjectW
DeleteDC
user32
UpdateLayeredWindow
SetTimer
GetWindowRect
MonitorFromPoint
LoadCursorW
GetDC
TranslateMessage
PeekMessageW
ReleaseDC
GetDesktopWindow
ShowWindow
CreateWindowExW
RegisterClassW
UpdateWindow
GetMonitorInfoW
DefWindowProcW
DispatchMessageW
DestroyWindow
Sections
.text Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ