Static task
static1
Behavioral task
behavioral1
Sample
88d7cf9774bddd8b1865932d1996204731afdebcd28ab0495753061a5e454524.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
88d7cf9774bddd8b1865932d1996204731afdebcd28ab0495753061a5e454524.exe
Resource
win10v2004-20220812-en
General
-
Target
88d7cf9774bddd8b1865932d1996204731afdebcd28ab0495753061a5e454524
-
Size
125KB
-
MD5
445c5d1655cd1184d44f76d95a847bdb
-
SHA1
fef9d3ec9d29f0ac48760eb94b22fa0cbc772c79
-
SHA256
88d7cf9774bddd8b1865932d1996204731afdebcd28ab0495753061a5e454524
-
SHA512
1163688389989ef3638399ce66f4ed8cb751e71135cdd8b5fcabf27dce89ca019acc165a3b8338ae0c87ad241daa8ffc0cf961ac08fc94e834077ecf7c1ee882
-
SSDEEP
3072:1MaiYLwrKwX+xqntNwnO4JcKOT216FygAMDMM/:1MaiYLj18ntNCO4JcpT216ctMwM/
Malware Config
Signatures
Files
-
88d7cf9774bddd8b1865932d1996204731afdebcd28ab0495753061a5e454524.exe windows x86
d8d1ffd410ec4f4ac75654d2b96596d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SearchPathA
GetLocaleInfoA
CreateFileMappingA
GetModuleHandleA
LoadResource
SetFilePointer
GetCommandLineA
LCMapStringW
Module32Next
FreeEnvironmentStringsW
SetEvent
GetVersion
FormatMessageA
GetStartupInfoA
GetCommandLineW
MapViewOfFile
CreateToolhelp32Snapshot
ExitThread
GetProcessHeap
EnterCriticalSection
FindFirstFileA
WriteFile
lstrcpynA
IsBadStringPtrW
UnmapViewOfFile
LocalAlloc
CreateFileA
user32
InsertMenuA
ScrollWindowEx
IsZoomed
PeekMessageA
SetScrollInfo
SetPropA
DestroyWindow
DeleteMenu
GetWindowPlacement
GetDlgItemTextA
SetWindowPlacement
PostQuitMessage
DispatchMessageA
InvalidateRect
UnionRect
IsDialogMessageA
GetClassNameA
CheckRadioButton
OffsetRect
GetWindowLongA
CreateMenu
EndDeferWindowPos
UpdateWindow
ModifyMenuA
GetWindowTextA
RegisterClassExA
WindowFromPoint
DefMDIChildProcA
SetWindowTextA
CreateWindowExA
LoadCursorA
EnableWindow
GetUpdateRgn
TranslateMessage
GetDlgItem
msvcrt
_exit
__set_app_type
_XcptFilter
_acmdln
__p__commode
_except_handler3
_adjust_fdiv
_controlfp
__p__fmode
__setusermatherr
__getmainargs
exit
_initterm
memcpy
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ