Static task
static1
Behavioral task
behavioral1
Sample
88a449beaf14bdc9344d3dfa8b5759eef05c7a6e5c4d73cf4c472860f245c2bb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
88a449beaf14bdc9344d3dfa8b5759eef05c7a6e5c4d73cf4c472860f245c2bb.exe
Resource
win10v2004-20221111-en
General
-
Target
88a449beaf14bdc9344d3dfa8b5759eef05c7a6e5c4d73cf4c472860f245c2bb
-
Size
306KB
-
MD5
8c5509c603103a9d7ab2849642e34233
-
SHA1
cc8e305f91ddd9c4024cb7512be5e3cddc9da05a
-
SHA256
88a449beaf14bdc9344d3dfa8b5759eef05c7a6e5c4d73cf4c472860f245c2bb
-
SHA512
e1a204c7dbabf99b9c440aaa66f343eee469be44bd57b471abb825730e8b6f85fe89493dfcd8b74cd100f6d60241cff374cd64c60fb86af5cf8654c07313ada0
-
SSDEEP
1536:o0naQqJnrDtHPkcvvT0+9HjQ2sm3T1qmb5U5JD6pQm6ptam60p1tz1N4jrkIsA7c:1naztVvT0+t93kN4jQHQYPyToFZsw
Malware Config
Signatures
Files
-
88a449beaf14bdc9344d3dfa8b5759eef05c7a6e5c4d73cf4c472860f245c2bb.exe windows x86
d3def229023fd3bdb25ecf5e3ffb5ab4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetProcessWindowStation
EndMenu
GetSysColor
GetScrollBarInfo
TrackPopupMenuEx
EndDeferWindowPos
GetWindowLongW
IsCharLowerA
GetSystemMetrics
IsZoomed
GetWindow
InSendMessage
DefFrameProcA
UpdateLayeredWindow
GetMenuState
GetMenuItemID
gdi32
UpdateICMRegKeyA
RemoveFontResourceExA
SetColorAdjustment
SetMetaRgn
GetWorldTransform
GetPath
MoveToEx
PlayEnhMetaFile
GetCharWidthA
SetBitmapDimensionEx
GetICMProfileA
SetBkColor
GdiComment
GetPaletteEntries
CloseEnhMetaFile
CreatePolygonRgn
ExtTextOutA
GetEnhMetaFileBits
DeleteColorSpace
ExtSelectClipRgn
PolyBezier
SetDIBColorTable
SetTextCharacterExtra
kernel32
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapSize
GetLocaleInfoA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProcAddress
GetProcessId
GetTapeStatus
GetVersion
GetFileSize
HeapAlloc
FlushFileBuffers
GetProcessHeap
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetTimeZoneInformation
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 95KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ