Static task
static1
Behavioral task
behavioral1
Sample
88115a21917f730a550187a3ee2f52993b016ccc0b305c9c3d665ea0c31dde93.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
88115a21917f730a550187a3ee2f52993b016ccc0b305c9c3d665ea0c31dde93.exe
Resource
win10v2004-20220812-en
General
-
Target
88115a21917f730a550187a3ee2f52993b016ccc0b305c9c3d665ea0c31dde93
-
Size
484KB
-
MD5
c2e6cf9e1b39d631a5223b6a2adf3056
-
SHA1
8b71339675349f2273f4b868358d344959070cb4
-
SHA256
88115a21917f730a550187a3ee2f52993b016ccc0b305c9c3d665ea0c31dde93
-
SHA512
d024f125c6549b2c5072cab67e8a19a3043287ef30936dc80a6dcfd620d0b9cb7dcd3bb9da0ddcd24266116babc07be7532270597f71b55691d25f8494a6e84a
-
SSDEEP
6144:WEqWoCgxuiPaXWzQi3F1a+yzXMxd6DkevU3Q+sKygjaCXp/Y8eVAjbi4Pt3r0:WEGrxhiWzQsa+3xATU/aC5gIu4Pt3r0
Malware Config
Signatures
Files
-
88115a21917f730a550187a3ee2f52993b016ccc0b305c9c3d665ea0c31dde93.exe windows x86
e3e1e40668952c90964902c5e1bed687
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UnregisterClassA
IsWindow
RegisterClassA
ValidateRect
SetRectEmpty
GetSystemMetrics
DestroyIcon
CharUpperA
CreateWindowExA
DestroyWindow
GetClassInfoA
SystemParametersInfoA
SetCapture
GetDC
GetLastActivePopup
ReleaseDC
SetActiveWindow
EmptyClipboard
GetWindowPlacement
RegisterClassExA
DrawTextA
LoadAcceleratorsA
PostMessageA
GetSystemMenu
DefWindowProcA
SetWindowsHookExA
ClientToScreen
CopyRect
CallNextHookEx
CheckMenuItem
IsIconic
GetMenuStringA
wsprintfA
EnableWindow
DestroyAcceleratorTable
LoadBitmapA
IsChild
GetWindowTextLengthA
EnableMenuItem
GetCapture
GetCursorPos
SendMessageA
GetDlgItem
GetWindowDC
SetMenuDefaultItem
MessageBoxA
PtInRect
ToAsciiEx
OffsetRect
AdjustWindowRectEx
CreateIconIndirect
GetWindowRect
ModifyMenuA
ShowWindow
LoadIconA
GetKeyState
UnionRect
comctl32
ImageList_DragEnter
PropertySheetA
ImageList_Draw
ImageList_GetImageCount
ImageList_AddMasked
InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_SetBkColor
ord17
kernel32
SetEnvironmentVariableA
GetPrivateProfileIntA
GetSystemDirectoryA
GetTimeZoneInformation
GetFileType
RtlUnwind
GetConsoleOutputCP
LCMapStringA
HeapReAlloc
TlsAlloc
WriteConsoleW
GetVersionExA
MultiByteToWideChar
GetStringTypeA
FormatMessageA
GlobalHandle
TerminateProcess
GetProcAddress
WriteConsoleA
CompareStringW
LCMapStringW
CopyFileA
FindFirstFileA
CreateMutexA
IsValidLocale
CloseHandle
GetModuleHandleA
GetProcessHeap
WideCharToMultiByte
FreeEnvironmentStringsW
RaiseException
GetLocaleInfoA
SetStdHandle
HeapSize
VirtualFree
GlobalFree
TlsSetValue
GetEnvironmentVariableA
GetStartupInfoA
GetCPInfo
GetStringTypeW
LocalFileTimeToFileTime
FindResourceA
VirtualQuery
GetCurrentThread
CreateProcessA
ExitProcess
GetLocaleInfoW
GetCommandLineA
HeapAlloc
ReadFile
GetTickCount
WriteFile
GetEnvironmentStrings
GetLastError
HeapCreate
GetCurrentThreadId
InterlockedExchange
TlsGetValue
SetUnhandledExceptionFilter
lstrcatA
GlobalAlloc
GlobalLock
FlushFileBuffers
IsDebuggerPresent
GetModuleFileNameA
QueryPerformanceCounter
VirtualAlloc
EnterCriticalSection
SetEndOfFile
GetCurrentProcessId
HeapDestroy
SetHandleCount
LeaveCriticalSection
MoveFileA
InitializeCriticalSection
GetTimeFormatA
MapViewOfFile
FindNextFileA
InterlockedDecrement
GetPrivateProfileStringA
TlsFree
GetFileTime
SetFilePointer
GetStdHandle
LoadLibraryA
lstrcpynA
FreeLibrary
GetEnvironmentStringsW
Sleep
CompareStringA
FreeEnvironmentStringsA
GetACP
GetConsoleCP
UnhandledExceptionFilter
GetOEMCP
IsValidCodePage
GetDateFormatA
HeapFree
GetCurrentProcess
GlobalUnlock
CreateFileMappingA
WritePrivateProfileSectionA
CreateFileA
DeleteCriticalSection
InterlockedIncrement
IsDBCSLeadByte
GlobalReAlloc
FileTimeToSystemTime
GetConsoleMode
GetSystemTimeAsFileTime
SetLastError
oleaut32
LoadTypeLi
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
comdlg32
PrintDlgA
GetFileTitleA
Sections
.text Size: 116KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 248KB - Virtual size: 245KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ