Static task
static1
Behavioral task
behavioral1
Sample
98ddcd142b307ddcea3dd5a1d7b7fd9b929ccea41695bd703d11b0d0fbb2c7fc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
98ddcd142b307ddcea3dd5a1d7b7fd9b929ccea41695bd703d11b0d0fbb2c7fc.exe
Resource
win10v2004-20220812-en
General
-
Target
98ddcd142b307ddcea3dd5a1d7b7fd9b929ccea41695bd703d11b0d0fbb2c7fc
-
Size
41KB
-
MD5
52f67fa3b53f0d4ddd95475168ba7e0c
-
SHA1
98b56873c2a0c5ae1224b51b9a87030531bed749
-
SHA256
98ddcd142b307ddcea3dd5a1d7b7fd9b929ccea41695bd703d11b0d0fbb2c7fc
-
SHA512
b2d4b74485fbf96a8e9028e1f61e1ca7be78af3a997c4b8030564af297e743a646c46a14a651ca003bc0566a3b24466b985af1b302f8d803bbb1c7a8334b2b9f
-
SSDEEP
768:q+pdQ/K13UuVtQcs4yWTyKOKvxsj8oehi:q4QM2cs4yWOKbv9oehi
Malware Config
Signatures
Files
-
98ddcd142b307ddcea3dd5a1d7b7fd9b929ccea41695bd703d11b0d0fbb2c7fc.exe windows x86
2d05680b386b482aa243152cf583e6d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetForegroundWindow
GetWindowTextA
advapi32
OpenSCManagerA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
ChangeServiceConfigA
StartServiceA
CloseServiceHandle
OpenServiceA
ControlService
CreateServiceA
DeleteService
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
SetServiceStatus
kernel32
FlushFileBuffers
FreeLibrary
SetStdHandle
CloseHandle
GetCurrentProcess
GetLastError
Sleep
WinExec
WriteFile
CreateFileA
DeleteFileA
lstrcatA
GetSystemDirectoryA
LockResource
LoadResource
SizeofResource
FindResourceA
lstrcpyA
Process32Next
Process32First
CreateToolhelp32Snapshot
OpenProcess
WaitForSingleObject
CreateRemoteThread
GlobalFree
GetShortPathNameA
GlobalAlloc
CreateThread
GetProcAddress
LoadLibraryA
GetVersion
GetModuleFileNameA
SetFileTime
GetFileTime
ReadFile
GetFileSize
ReadProcessMemory
MoveFileA
ExitProcess
TerminateProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ