Static task
static1
Behavioral task
behavioral1
Sample
88603377fb976c90d747e5db16c70445a9cc5ec275f64fccb5a6c7b5cf5de230.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
88603377fb976c90d747e5db16c70445a9cc5ec275f64fccb5a6c7b5cf5de230.exe
Resource
win10v2004-20221111-en
General
-
Target
88603377fb976c90d747e5db16c70445a9cc5ec275f64fccb5a6c7b5cf5de230
-
Size
31KB
-
MD5
6888f640ebd5685f910e721499c45fbf
-
SHA1
55216a3a4bf050060ac74ed32bba47d8bed25096
-
SHA256
88603377fb976c90d747e5db16c70445a9cc5ec275f64fccb5a6c7b5cf5de230
-
SHA512
dc15b314187d764ba76c0b12b46313d174db7b942372494d38e18073d5d76827d6c4ab1749be374d5b6fd9254cd76a9163e3f3cd77af800b7f0a3e4bea3fd381
-
SSDEEP
768:7nXDC1rPIYxYAYF3DDDDFEa88883B7iisBBovL5lkkhINM2:7nzC1r2FVEa88883piipD53K
Malware Config
Signatures
Files
-
88603377fb976c90d747e5db16c70445a9cc5ec275f64fccb5a6c7b5cf5de230.exe windows x86
2bfd97076524acfedaeb87fc810325ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
HeapDestroy
ResumeThread
WaitForSingleObject
GetACP
VirtualProtect
GetStdHandle
GetModuleHandleA
GetCurrentProcessId
InterlockedExchange
GetSystemDefaultLCID
HeapCreate
LoadLibraryExA
CreateIoCompletionPort
GetTimeFormatA
IsDebuggerPresent
GlobalMemoryStatus
PeekConsoleInputA
GetOEMCP
GlobalSize
GetTapeStatus
user32
GetFocus
GetCursorPos
ReleaseDC
EndPaint
wsprintfA
GetDC
GetTitleBarInfo
GetClassNameA
FillRect
BeginPaint
ShowWindow
DrawTextA
GetWindow
SetForegroundWindow
GetDlgItem
DragDetect
GetWindowTextLengthA
GetParent
FrameRect
gdi32
CreateBitmap
GetLayout
CreatePalette
GetClipBox
CloseFigure
secur32
DecryptMessage
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ