Static task
static1
Behavioral task
behavioral1
Sample
866aeb8a59603c9ab3c74bc2892fb9ba41085675e3a63ca7fa40ea0430a84236.exe
Resource
win7-20220901-en
General
-
Target
866aeb8a59603c9ab3c74bc2892fb9ba41085675e3a63ca7fa40ea0430a84236
-
Size
760KB
-
MD5
920f7eb80befbaa848099e98b0c83d30
-
SHA1
c124f737926971235abe78210e4db8ddeedd963c
-
SHA256
866aeb8a59603c9ab3c74bc2892fb9ba41085675e3a63ca7fa40ea0430a84236
-
SHA512
3f606eac2970a655375875baa7d1016542ca2b9d35642ead5b141aad333f2c202be61a4aa929d72d2a69c26a42cde7e5ac9137913b3fd378bdfdbd2787ed881f
-
SSDEEP
12288:UQCINImrIU1MErSgMm5t6jEvjqqqxhfj2TsYw5b4DF:Rhrv1qqyhbOsTb4F
Malware Config
Signatures
Files
-
866aeb8a59603c9ab3c74bc2892fb9ba41085675e3a63ca7fa40ea0430a84236.exe windows x86
68d09632523e04a9bb43afc90099516d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
hhsetup
?AddFolder@CCollection@@QAEPAVCFolder@@PBDKPAKG@Z
?Close@CCollection@@QAEKXZ
?SetMasterCHM@CCollection@@QAEXPBDG@Z
?AddChildFolder@CFolder@@QAEPAV1@PBDKPAKG@Z
?AddTitle@CCollection@@QAEPAVCTitle@@PBD0000GIPAVCLocation@@PAKH0@Z
??0CCollection@@QAE@XZ
?Open@CCollection@@QAEKPBD@Z
?RemoveCollection@CCollection@@QAEKH@Z
?Save@CCollection@@QAEKXZ
??1CCollection@@QAE@XZ
kernel32
GetProcAddress
GetStdHandle
OutputDebugStringA
RtlUnwind
SetEnvironmentVariableA
GetLocaleInfoW
SetEndOfFile
GetOEMCP
GetACP
SetStdHandle
IsBadCodePtr
lstrcpyA
GetModuleFileNameA
lstrcpynA
lstrlenA
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
lstrlenW
LeaveCriticalSection
EnterCriticalSection
lstrcatA
DeleteFileA
lstrcmpiA
SearchPathA
FindClose
FindFirstFileA
CloseHandle
GetLastError
CreateFileA
CreateDirectoryA
WaitForSingleObject
CreateProcessA
lstrcmpA
WriteFile
ReadFile
GetStringTypeW
GetStringTypeA
GetVersionExA
SetConsoleMode
GetConsoleMode
IsValidCodePage
IsValidLocale
GetLocaleInfoA
GetFileType
SetHandleCount
WriteConsoleA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
EnumSystemLocalesA
RaiseException
IsBadWritePtr
IsBadReadPtr
HeapValidate
DebugBreak
LocalFree
LCMapStringA
GetUserDefaultLCID
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ReadConsoleInputA
FlushFileBuffers
SetFilePointer
PeekConsoleInputA
GetNumberOfConsoleInputEvents
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
HeapFree
HeapAlloc
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetConsoleCtrlHandler
user32
LoadStringA
wvsprintfA
ole32
CoInitialize
CoUninitialize
oleaut32
GetErrorInfo
SysStringByteLen
VariantClear
SysAllocStringByteLen
SysAllocString
SysFreeString
SysStringLen
LoadRegTypeLi
VariantInit
VariantChangeType
CreateErrorInfo
SetErrorInfo
Sections
.text Size: 592KB - Virtual size: 590KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.lrdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE