Static task
static1
Behavioral task
behavioral1
Sample
788fe5cf9650521ddb4fb4a44ec665d58daa1bf22cca51aa46adba9a87f733bb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
788fe5cf9650521ddb4fb4a44ec665d58daa1bf22cca51aa46adba9a87f733bb.exe
Resource
win10v2004-20220812-en
General
-
Target
788fe5cf9650521ddb4fb4a44ec665d58daa1bf22cca51aa46adba9a87f733bb
-
Size
80KB
-
MD5
93e48abd6d4a6363540719ad16fac468
-
SHA1
7e605dcb466d87f7e3c1abc56834ecbb82d23bc0
-
SHA256
788fe5cf9650521ddb4fb4a44ec665d58daa1bf22cca51aa46adba9a87f733bb
-
SHA512
c748d788f07f58ba55922842155e72bbaf915bdf6af0ca2433bc112cc25647ec4312e2d68a061cdd563733c5f3e0ab42f273227504807b241c04ac79e6f48870
-
SSDEEP
1536:Q9pZeTgJePO1eAZoxbeGj2xZzZloi5wPYhcxt0hKRkV1qMH8xq:Akg1eks1j2/T+kNpcw
Malware Config
Signatures
Files
-
788fe5cf9650521ddb4fb4a44ec665d58daa1bf22cca51aa46adba9a87f733bb.exe windows x86
1e51879f116875acc43c110bde26f8d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
SetWindowTextA
GetSysColor
SetWindowPos
PostQuitMessage
GetSubMenu
UnhookWindowsHookEx
EnableMenuItem
GetMessageA
EqualRect
EnumWindows
GetSysColorBrush
FrameRect
GetScrollPos
kernel32
VirtualAllocEx
GetSystemTime
InterlockedExchange
GetFileAttributesA
RtlUnwind
GetOEMCP
ExitProcess
GetTickCount
GetCurrentProcessId
QueryPerformanceCounter
FileTimeToSystemTime
GetACP
GetStartupInfoA
GetThreadLocale
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetTempPathA
gdi32
DPtoLP
CopyEnhMetaFileA
CreateICW
GetMapMode
ExcludeClipRect
CreateCompatibleBitmap
SetViewportExtEx
SelectClipPath
FillRgn
ole32
OleRun
CoCreateInstance
StringFromGUID2
CoInitializeSecurity
DoDragDrop
CoInitialize
StgOpenStorage
CoTaskMemRealloc
CoRevokeClassObject
advapi32
CryptHashData
FreeSid
QueryServiceStatus
RegCreateKeyA
GetUserNameA
RegQueryValueExW
RegCreateKeyExW
CheckTokenMembership
GetSecurityDescriptorDacl
AdjustTokenPrivileges
msvcrt
strncpy
_mbscmp
_strdup
_CIpow
fprintf
_flsbuf
signal
__getmainargs
_lock
__initenv
__setusermatherr
raise
puts
strcspn
_fdopen
fflush
strlen
iswspace
comctl32
InitCommonControls
ImageList_SetIconSize
ImageList_Destroy
ImageList_GetBkColor
CreatePropertySheetPageA
ImageList_Write
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_DrawEx
ImageList_LoadImageA
ImageList_GetIcon
ImageList_LoadImageW
ImageList_DragEnter
shell32
CommandLineToArgvW
ShellExecuteW
DragAcceptFiles
ShellExecuteEx
SHBrowseForFolderA
ExtractIconW
ExtractIconExW
DoEnvironmentSubstW
DragQueryFileW
DragQueryFileA
SHGetPathFromIDList
oleaut32
SafeArrayPutElement
SafeArrayUnaccessData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayPtrOfIndex
SafeArrayGetUBound
SysReAllocStringLen
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE