Static task
static1
Behavioral task
behavioral1
Sample
ExtraSoft.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ExtraSoft.exe
Resource
win10v2004-20221111-en
General
-
Target
ExtraSoft.exe
-
Size
6.6MB
-
MD5
36be22f426d4a5412152da936d0a3ce4
-
SHA1
40cb06137099d06314becf8cf97da39c6f981047
-
SHA256
1a26f913157ad417326e84278e34076d240621da8f5cf3c82b3debd31c988101
-
SHA512
0e08bf821972c4908f79398db2db1bba616de2ff0529d5a7c611876304ab3fb792447dfcc4390fa33fc1a7611cdc0452d0a525145ea485e329093b2d8fff1b5a
-
SSDEEP
196608:uqgVWSx+nNJ5KqgjFuiGu79SgZ5RwiwoN:iXxMXKqgjFx579Swjw
Malware Config
Signatures
Files
-
ExtraSoft.exe.exe windows x86
c890dcfacdff6743bacb25ad2aaae107
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
IsDialogMessageW
CharUpperBuffW
gdi32
CreatePen
ole32
CoUninitialize
shell32
DragAcceptFiles
comctl32
_TrackMouseEvent
msimg32
AlphaBlend
winmm
timeGetTime
winspool.drv
ClosePrinter
Sections
.text Size: - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 236B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oz6 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.5 ' Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.\S< Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 384KB - Virtual size: 383KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ