Static task
static1
Behavioral task
behavioral1
Sample
988fb5f461c72fd03fa508721d40dd7bdc400de0677b5e664b0776f2877bf980.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
988fb5f461c72fd03fa508721d40dd7bdc400de0677b5e664b0776f2877bf980.exe
Resource
win10v2004-20220901-en
General
-
Target
988fb5f461c72fd03fa508721d40dd7bdc400de0677b5e664b0776f2877bf980
-
Size
19.6MB
-
MD5
56985ca1d011248bf84e1b30dd9de7b4
-
SHA1
06dd58aab41f9dc7cce66dc299985acfdc742abb
-
SHA256
988fb5f461c72fd03fa508721d40dd7bdc400de0677b5e664b0776f2877bf980
-
SHA512
8561b0dc1371e480bfee006405da350bb6c40cf4ba8cb3ab1c8858d88d33fad9eacdb5fa25a2ec325138591444145f5363aee78a8ae1543433c64155fe0e6acb
-
SSDEEP
393216:R5PLieb1Ch+IeHTO8qG8Byjdj0BAmzglPCIad8bS3uJhsl+i2S6Mz:R5+ekhmH/qRByZjSECjIvCH2O
Malware Config
Signatures
Files
-
988fb5f461c72fd03fa508721d40dd7bdc400de0677b5e664b0776f2877bf980.exe windows x86
aebdf34c1de9e9f6da9e95ff1f955201
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
shell32
SHGetPathFromIDListW
SHGetFileInfoW
CommandLineToArgvW
ShellExecuteW
ShellExecuteExW
SHGetMalloc
SHBrowseForFolderW
SHGetSpecialFolderLocation
kernel32
CreateFileA
FreeLibrary
GetProcessHeap
HeapAlloc
GetLastError
GetProcAddress
HeapFree
LoadLibraryW
GetModuleFileNameW
LocalFree
WaitForSingleObject
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
CloseHandle
SetFileApisToOEM
GetCurrentProcess
GetCurrentThread
SetPriorityClass
GetEnvironmentVariableW
SetThreadPriority
GetVersionExW
GetModuleHandleW
ExpandEnvironmentStringsW
CreateFileW
GetCommandLineW
DeleteFileW
GetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
FindClose
FindNextFileW
FindFirstFileW
FormatMessageW
InterlockedExchangeAdd
SetEndOfFile
SetFileTime
WriteFile
SetFilePointer
GetFileSize
ReadFile
MultiByteToWideChar
WideCharToMultiByte
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetLongPathNameW
MoveFileW
lstrlenW
GetTempPathW
GetFullPathNameW
GetWindowsDirectoryW
GetTempFileNameW
SetFileAttributesW
SetEvent
ResetEvent
CreateEventW
FindResourceW
FileTimeToSystemTime
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LoadLibraryA
HeapReAlloc
VirtualAlloc
FlushFileBuffers
GetConsoleMode
GetConsoleCP
LCMapStringW
LCMapStringA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetACP
WaitForMultipleObjects
ResumeThread
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsValidCodePage
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetVersionExA
GetStartupInfoW
ExitThread
GetCurrentThreadId
CreateThread
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
user32
TranslateMessage
IsWindowVisible
EnableWindow
GetMessageW
KillTimer
DispatchMessageW
PostQuitMessage
CreateDialogParamW
ScreenToClient
DestroyIcon
IsWindow
ShowWindow
MessageBoxW
PostMessageW
DialogBoxParamW
SetWindowPos
GetWindowRect
GetSystemMetrics
GetWindowTextW
SetWindowTextW
GetDlgItem
SendMessageW
EndDialog
SetFocus
LoadIconW
GetActiveWindow
GetDesktopWindow
LoadStringW
SetTimer
IsDialogMessageW
gdi32
DeleteObject
CreateSolidBrush
ole32
CoUninitialize
CoTaskMemFree
CoInitializeEx
CoCreateInstance
CoInitialize
Sections
.text Size: 257KB - Virtual size: 257KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ