Static task
static1
Behavioral task
behavioral1
Sample
88a1e981d109134ec6cd905e2910a19f679d93cec088b9d060e2c301019a4448.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
88a1e981d109134ec6cd905e2910a19f679d93cec088b9d060e2c301019a4448.exe
Resource
win10v2004-20220812-en
General
-
Target
88a1e981d109134ec6cd905e2910a19f679d93cec088b9d060e2c301019a4448
-
Size
56KB
-
MD5
c63458a238257fdb2b60fe04487fb48f
-
SHA1
34fb828f696078a74c3a27be1e3d24a05d135d47
-
SHA256
88a1e981d109134ec6cd905e2910a19f679d93cec088b9d060e2c301019a4448
-
SHA512
1e785cfb4a3fefe44ba7dd4cc214f682a5e0a8ee131d5ec265aa537ae77573d3a4bb7f6a825dd345ba4754b865c1ab754b05d6416795d1975dbb28d09df14359
-
SSDEEP
768:FR8qdzqCV2nZcHLvIFIRRFynpPuOVMcv9q9/iFtHj+mN70lHSoS:g2QZc7JRORZ6Gq90tHwlyo
Malware Config
Signatures
Files
-
88a1e981d109134ec6cd905e2910a19f679d93cec088b9d060e2c301019a4448.exe windows x86
c31e8de01a3cb3e4cf97758d7cee2166
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
lstrlenA
ExitProcess
Sleep
lstrcatA
lstrcmpiA
GetTickCount
LoadLibraryA
GetLastError
GetProcAddress
GetModuleHandleA
GetVolumeInformationA
GetComputerNameA
GetTempPathA
GetModuleFileNameA
CloseHandle
CreateMutexA
OpenMutexA
DeleteFileA
WriteFile
CreateFileA
GetFileSize
GetFileAttributesA
CopyFileA
SetFileAttributesA
GetCurrentProcess
GetVersionExA
HeapAlloc
GetProcessHeap
HeapFree
GetSystemInfo
VirtualProtect
TerminateProcess
GetStartupInfoA
GetCommandLineA
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetFilePointer
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
HeapSize
RtlUnwind
InterlockedExchange
VirtualQuery
SetStdHandle
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoA
FlushFileBuffers
user32
wsprintfA
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE