Static task
static1
Behavioral task
behavioral1
Sample
588fbf4ad9434e3a84fe4951e11f939de66dafa93fe2acad3afa51b7ce770781.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
588fbf4ad9434e3a84fe4951e11f939de66dafa93fe2acad3afa51b7ce770781.exe
Resource
win10v2004-20220812-en
General
-
Target
588fbf4ad9434e3a84fe4951e11f939de66dafa93fe2acad3afa51b7ce770781
-
Size
311KB
-
MD5
9257e6bce6b7bf04259edc2ca9c8ce40
-
SHA1
56f3e3b1f98d89cafefae3004a0cac2edb13c7a4
-
SHA256
588fbf4ad9434e3a84fe4951e11f939de66dafa93fe2acad3afa51b7ce770781
-
SHA512
be23da19e0e2e8d9196fe13a735a0ec7ada32f0c98ac715f0a7979c9cf0dab91e6859bcf29bc818eb823ce58bfb8d3242746ba66beb3f4c53cb3dff12214f724
-
SSDEEP
6144:xGwYMRrT1/MoAYHQR1Vxp7Y1QaIAsMvA+nwO3xwVQCt0EJ3TrrZD39ma5hg:QwZp1/M0HoLd2QDb+nj3xdCjBria5h
Malware Config
Signatures
Files
-
588fbf4ad9434e3a84fe4951e11f939de66dafa93fe2acad3afa51b7ce770781.exe windows x86
bb10b239dd40cd2551addd0c880a1f22
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
GetPrivateProfileIntA
GetFileAttributesW
VirtualProtectEx
GetCurrentThread
SetLastError
GetStdHandle
GetFileAttributesW
GetCurrentProcess
HeapFree
GetStringTypeA
GetModuleHandleA
DeviceIoControl
LocalFlags
CreateDirectoryW
GetVersionExA
CreateEventA
GlobalLock
GetPrivateProfileSectionA
FindClose
RemoveDirectoryW
user32
IsCharLowerA
IsWindow
PeekMessageW
IsZoomed
DispatchMessageA
IsDialogMessageA
PostMessageW
SetCursorPos
wsprintfW
GetWindowLongW
SetFocus
GetWindowTextW
LoadCursorW
ntmarta
AccConvertSDToAccess
AccConvertAclToAccess
AccGetExplicitEntries
AccFreeIndexArray
uxtheme
CloseThemeData
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ