Static task
static1
Behavioral task
behavioral1
Sample
88770b571ffbbc34154a4fa1c2a15617a6f642b5efdb81c1ae0d41cda4c704c9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
88770b571ffbbc34154a4fa1c2a15617a6f642b5efdb81c1ae0d41cda4c704c9.exe
Resource
win10v2004-20220812-en
General
-
Target
88770b571ffbbc34154a4fa1c2a15617a6f642b5efdb81c1ae0d41cda4c704c9
-
Size
284KB
-
MD5
4788567580815665d410093adccfcdbf
-
SHA1
74203d08ce78dd10e6ab6f597c2d9688e0741cdc
-
SHA256
88770b571ffbbc34154a4fa1c2a15617a6f642b5efdb81c1ae0d41cda4c704c9
-
SHA512
dc53c84ba2f40dad449551a7013530d43cc039c6a4ec479a0cbe816f22021cf5bb4b35a66242be82807188d92c8b0cda7078fb2a0a9f41bdaae16574d92f41e8
-
SSDEEP
6144:OgVYAN41So2cbMTSq904FmGjtl0DL4lKusfC63UuZh2:Og+ANMhQ+m0wmKzgL4lKu2CqUu
Malware Config
Signatures
Files
-
88770b571ffbbc34154a4fa1c2a15617a6f642b5efdb81c1ae0d41cda4c704c9.exe windows x86
17ea2031b558b58cf1716e4d07136d87
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
StringFromIID
advapi32
RegOpenKeyExA
kernel32
GetCommandLineA
VirtualAlloc
LoadLibraryExA
FreeResource
GetOEMCP
ResetEvent
GetLastError
GetModuleHandleA
GetProcAddress
VirtualQuery
LocalReAlloc
GetFileType
GlobalDeleteAtom
MoveFileA
WriteFile
CompareStringA
ExitProcess
user32
SetScrollInfo
RegisterClassA
SetTimer
DestroyIcon
ShowWindow
SetWindowTextA
DestroyCursor
TranslateMessage
GetCursor
GetKeyboardLayoutNameA
CharToOemA
GetActiveWindow
SetWindowPlacement
GetKeyboardType
MoveWindow
GetFocus
ReleaseCapture
RemoveMenu
GetMenuItemID
GetMenuItemInfoA
ClientToScreen
EqualRect
msvcrt
log10
exit
sin
rand
_acmdln
atan
swprintf
mbstowcs
comdlg32
ChooseColorA
oleaut32
SysFreeString
VariantCopyInd
SysReAllocStringLen
SafeArrayUnaccessData
OleLoadPicture
VariantChangeType
SysStringLen
gdi32
SetPixel
CreateBrushIndirect
shell32
SHGetDiskFreeSpaceA
SHGetSpecialFolderLocation
DragQueryFileA
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 229KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ