?_DisableProcessWindowsGhos
Static task
static1
Behavioral task
behavioral1
Sample
d88903a21bfca38b97c38b219d6f6595ee21c7a43f24b4a4ff73af1f8684b201.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d88903a21bfca38b97c38b219d6f6595ee21c7a43f24b4a4ff73af1f8684b201.exe
Resource
win10v2004-20221111-en
General
-
Target
d88903a21bfca38b97c38b219d6f6595ee21c7a43f24b4a4ff73af1f8684b201
-
Size
164KB
-
MD5
6e7333de3ae5da26be72d639358c46de
-
SHA1
84caeb2e9ad243d0004338887f2f4659f8837c3a
-
SHA256
d88903a21bfca38b97c38b219d6f6595ee21c7a43f24b4a4ff73af1f8684b201
-
SHA512
b0d5ad549557d07d59a4540f031fcd20c10c9cd094b9f0a1bb015d9d5f9b1519ba4f9dd68c500b521c05cad4f0e42851ee59872567cf148d762494d95ed85afd
-
SSDEEP
3072:iYthJSqQfBP3DLl7kw0Y1RheL+94EX6/SB5ajWB/GK49NK8P2IuCR0:iWcfJP3Xl7kS1HGi4EX2SB5aSBXCh2A
Malware Config
Signatures
Files
-
d88903a21bfca38b97c38b219d6f6595ee21c7a43f24b4a4ff73af1f8684b201.exe windows x86
0e688d06d681d41bf1292d5e891cbb60
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AllocateLocallyUniqueId
gdi32
Rectangle
CreateCompatibleBitmap
GetCharWidth32W
SetWindowOrgEx
CreateEllipticRgnIndirect
CreatePen
CreatePolygonRgn
SetViewportExtEx
StartPage
BeginPath
GetCurrentObject
kernel32
CreateRemoteThread
DuplicateHandle
IsBadStringPtrW
GetLocaleInfoA
OpenFileMappingW
GetShortPathNameW
CompareStringW
GlobalCompact
GetComputerNameExW
OpenFileMappingA
IsBadStringPtrA
GetCommandLineA
GlobalHandle
GetCurrentDirectoryW
GetProcAddress
SetMailslotInfo
AddAtomA
Exports
Exports
Sections
.text Size: 153KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ewred Size: 512B - Virtual size: 137B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.trhgf Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfgf Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rtete Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.erui Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ouhggf Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ