Static task
static1
Behavioral task
behavioral1
Sample
88fe71a3d3d8b8105ddeeb8b3aec1d10eaebcddebbaa4fb5ba0688f504b7c537.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
88fe71a3d3d8b8105ddeeb8b3aec1d10eaebcddebbaa4fb5ba0688f504b7c537.exe
Resource
win10v2004-20220901-en
General
-
Target
88fe71a3d3d8b8105ddeeb8b3aec1d10eaebcddebbaa4fb5ba0688f504b7c537
-
Size
822KB
-
MD5
05747ab3fd3bb79692d761a7bb16ae30
-
SHA1
13970bb3d6a82a532e3acf437ca2fe1def1de593
-
SHA256
88fe71a3d3d8b8105ddeeb8b3aec1d10eaebcddebbaa4fb5ba0688f504b7c537
-
SHA512
1211b05712af7f498f80317cf3317b06aac6c9ae4c40bdde13b8ecc30793aa0d28cbc0f1663caf2f0a740c5af5f891454386fa94a3be3b689bf995dd8e760b42
-
SSDEEP
24576:Vmro/p/53f+pTV30+ihO6HFmZMleTJ3cKmfNiX:Yrah3f+n30+YTyMgTJ3cKKiX
Malware Config
Signatures
Files
-
88fe71a3d3d8b8105ddeeb8b3aec1d10eaebcddebbaa4fb5ba0688f504b7c537.exe windows x86
c5b594a3741651135e920622a35c5f0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapFree
VirtualProtectEx
lstrcmpW
GetFileType
GetPrivateProfileIntW
CreateMailslotW
ReadConsoleW
GetTimeFormatA
CompareStringW
GetSystemTime
GetVolumeInformationA
GetEnvironmentVariableW
GetDiskFreeSpaceW
GetModuleHandleA
WriteFile
GetProcessHeap
lstrcatA
GetCurrentDirectoryA
GetLastError
dmdskmgr
?namecmp@@YGHPBG0@Z
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 20KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdata Size: 798KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ