Static task
static1
Behavioral task
behavioral1
Sample
d88a67db931d4c023abc9dff575e2112a94e8a4ba3befb4e9cd159b7fe647143.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d88a67db931d4c023abc9dff575e2112a94e8a4ba3befb4e9cd159b7fe647143.exe
Resource
win10v2004-20220812-en
General
-
Target
d88a67db931d4c023abc9dff575e2112a94e8a4ba3befb4e9cd159b7fe647143
-
Size
18KB
-
MD5
cb0f442cff81caa837838b18f5c782e7
-
SHA1
2803e9c449feff54f0ad14cc003ee9d8a50940b4
-
SHA256
d88a67db931d4c023abc9dff575e2112a94e8a4ba3befb4e9cd159b7fe647143
-
SHA512
0238581324b8ddc112333bde8f91e0d40e487e55cdc9870e58d284e7cef7024c278a829c46158ec94b5a663dbd7433adde0fd3dcd7aab5bf15c510ad32906d96
-
SSDEEP
384:4d3WHDsgr7UecmHUZ1t2+rAShoOLAIU1zTYiUNknwzyGj69DInr:gm4gcu+nhoOAX1z3nGj6Sr
Malware Config
Signatures
Files
-
d88a67db931d4c023abc9dff575e2112a94e8a4ba3befb4e9cd159b7fe647143.exe windows x86
b2be5919af8d2686b94846959de41c9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
kernel32
CreateFileA
SetUnhandledExceptionFilter
InitializeCriticalSection
SetFilePointer
EnterCriticalSection
WriteFile
GetLastError
SetEndOfFile
GetCurrentDirectoryA
GetFileType
lstrcpynA
InterlockedCompareExchange
LocalAlloc
GetDriveTypeA
GetTickCount
CloseHandle
lstrcmpW
DeleteCriticalSection
lstrcmpA
lstrcatA
lstrlenA
FormatMessageA
IsDebuggerPresent
FlushFileBuffers
LocalFree
CreateDirectoryA
LeaveCriticalSection
ReadFile
ExitProcess
VirtualAlloc
GetModuleHandleA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
user32
GetDlgItem
MessageBoxA
wsprintfA
ole32
CoUninitialize
CoInitialize
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ