Static task
static1
Behavioral task
behavioral1
Sample
88398c8c655375115bc5efbc42da662fd5fb0be305ccfb1a87d3b3c5a63aaea7.exe
Resource
win7-20220812-en
General
-
Target
88398c8c655375115bc5efbc42da662fd5fb0be305ccfb1a87d3b3c5a63aaea7
-
Size
116KB
-
MD5
7774b89475813857791460995486ed28
-
SHA1
dbf16322dd7f10db27885f9ebe9403917378109f
-
SHA256
88398c8c655375115bc5efbc42da662fd5fb0be305ccfb1a87d3b3c5a63aaea7
-
SHA512
2a78ce44b6cf6cb47e7b411e406586b11e3edd9daf11336b4c014651594dcb77bcee95d71f4398dccbb2327195f0207dc325fecdfd577d6903ed760705f31f73
-
SSDEEP
3072:LQQoNrUPH0NUS2jbxWGqrS2jbxWGq0okG:LQQox60NUSbGqrSbGqRk
Malware Config
Signatures
Files
-
88398c8c655375115bc5efbc42da662fd5fb0be305ccfb1a87d3b3c5a63aaea7.exe windows x86
e2cb8245b7f4b4634dd46e944f5703a7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableA
GetFileAttributesA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
GetCommandLineW
QueryPerformanceCounter
ReleaseMutex
SetErrorMode
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
lstrcpynA
lstrlenA
lstrlenW
CreateFileW
VirtualAlloc
FreeLibrary
ExitProcess
CreateMutexA
LoadLibraryA
CloseHandle
user32
MessageBoxA
LoadIconA
SendMessageTimeoutA
SetForegroundWindow
LoadIconW
GetWindowThreadProcessId
LoadStringA
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
shlwapi
PathRemoveFileSpecA
StrStrIA
StrCmpIW
SHSetValueA
SHGetValueA
msvcrt
memcpy
_vsnprintf
Sections
.te3xtR1 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.te3xtR9 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textR8 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textR7 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textR6 Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 586B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ