Static task
static1
Behavioral task
behavioral1
Sample
88c9b21095a57cce75d878f2cbc458196402f0bcc70ebeb6a975469db592b286.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
88c9b21095a57cce75d878f2cbc458196402f0bcc70ebeb6a975469db592b286.exe
Resource
win10v2004-20220901-en
General
-
Target
88c9b21095a57cce75d878f2cbc458196402f0bcc70ebeb6a975469db592b286
-
Size
223KB
-
MD5
96d2bbb2a6cfc4084faab5b8e1d178e7
-
SHA1
8656d5e3e8ec75b521644adfb547d21e3649adb0
-
SHA256
88c9b21095a57cce75d878f2cbc458196402f0bcc70ebeb6a975469db592b286
-
SHA512
5b2fa78c5fa21e4b65b175807e7fc796e0bf36d605ed64dc33df568c089bd8798b98b8f5d62817a84346f214f17f5dbf75841b5647096c386cad855d8ba10a1a
-
SSDEEP
3072:DiLKyQfK9q21faTfTc+wcHTUxWp/rvuFoiHeO0SSC4z95j3frYeFvi/8jyKV9Vce:KKyQfK9XZIcv0yFtS953YUvKSy4
Malware Config
Signatures
Files
-
88c9b21095a57cce75d878f2cbc458196402f0bcc70ebeb6a975469db592b286.exe windows x86
fc98de683476c079b2f5411e55f3ffe3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
cos
clock
srand
acos
mbstowcs
swprintf
memset
advapi32
RegDeleteValueA
GetLengthSid
shlwapi
PathGetCharTypeA
SHQueryValueExA
SHQueryInfoKeyA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
user32
GetScrollInfo
EnableMenuItem
LoadCursorA
GetTopWindow
MsgWaitForMultipleObjects
ShowScrollBar
GetKeyboardType
KillTimer
SendMessageW
GetPropA
GetWindowTextA
CharNextW
SetClipboardData
WindowFromPoint
SetWindowsHookExA
ActivateKeyboardLayout
ReleaseCapture
CreateIcon
SetMenuItemInfoA
CreateMenu
IntersectRect
EnableWindow
CallNextHookEx
GetForegroundWindow
GetWindowPlacement
OemToCharA
DrawEdge
RegisterClassA
TranslateMDISysAccel
GetClientRect
kernel32
ExitThread
GetProcAddress
LoadLibraryA
VirtualAllocEx
GetCommandLineA
ExitProcess
GetStdHandle
FindClose
LoadLibraryExA
GetLastError
GetOEMCP
GetModuleHandleA
lstrlenW
GetStringTypeA
GetACP
GetCommandLineW
Sections
.text Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ