Static task
static1
Behavioral task
behavioral1
Sample
ExtraSoft/ExtraSoft.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ExtraSoft/ExtraSoft.exe
Resource
win10v2004-20220812-en
General
-
Target
ExtraSoft.zip
-
Size
7.0MB
-
MD5
853b84baf94f51be654b11796b88214e
-
SHA1
7c25d3ce7fda295cefef757245ae0b3205165619
-
SHA256
bf1e686645d6d084632d308bd6dd402134ab8f3bda09ffffdcddbfd13cfe3726
-
SHA512
cd6feeed2e09e8ac5f9ba761b650788c78a83ed5331befde07640b566e429c12b08275016599fa1b3bd660d30912ac3d9896694e3ffa9cf08747efc9cd958b4c
-
SSDEEP
196608:Iw3j4PTQKjF2YILfGGIDfJiQTaSX5/aib3xw3:j3jpKhILfNUf3zJaibha
Malware Config
Signatures
Files
-
ExtraSoft.zip.zip
Password: soft2022
-
ExtraSoft/ExtraSoft.exe.exe windows x86
Password: soft2022
c890dcfacdff6743bacb25ad2aaae107
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
IsDialogMessageW
CharUpperBuffW
gdi32
CreatePen
ole32
CoUninitialize
shell32
DragAcceptFiles
comctl32
_TrackMouseEvent
msimg32
AlphaBlend
winmm
timeGetTime
winspool.drv
ClosePrinter
Sections
.text Size: - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 236B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oz6 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.5 ' Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.\S< Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 384KB - Virtual size: 383KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ