Static task
static1
Behavioral task
behavioral1
Sample
98c3c5f885f6c82eca6e2a42ff8f8dc043122c9d363e8db8df8ac866703e22df.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
98c3c5f885f6c82eca6e2a42ff8f8dc043122c9d363e8db8df8ac866703e22df.exe
Resource
win10v2004-20220812-en
General
-
Target
98c3c5f885f6c82eca6e2a42ff8f8dc043122c9d363e8db8df8ac866703e22df
-
Size
385KB
-
MD5
c1c206612fb8d7b4d68d2f1eb9d435ca
-
SHA1
6179fee390dd6a23003213f6bd7bbf8c64903910
-
SHA256
98c3c5f885f6c82eca6e2a42ff8f8dc043122c9d363e8db8df8ac866703e22df
-
SHA512
a613f7a8852ebd6b955523aa7bc301dd4ca20557668d625b6393502eb771f54ed734d576f798b4148c7e77da5acf190d94fcbfa7152db182630798f495f9b8bb
-
SSDEEP
12288:IyZV8/80DXdDmtKvP1PnFj/UTeA9eTdPWDnO:6NwtA9JceDpAO
Malware Config
Signatures
Files
-
98c3c5f885f6c82eca6e2a42ff8f8dc043122c9d363e8db8df8ac866703e22df.exe windows x86
24e6ea8f29bc87a8d3ce2139de5e5c3c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetConnectA
FindFirstUrlCacheEntryW
FtpOpenFileA
InternetAutodialHangup
HttpSendRequestExA
FindNextUrlCacheEntryA
GetUrlCacheGroupAttributeW
RetrieveUrlCacheEntryFileW
UnlockUrlCacheEntryStream
FtpGetFileSize
IncrementUrlCacheHeaderData
RetrieveUrlCacheEntryFileA
FtpFindFirstFileA
GetUrlCacheEntryInfoExA
ResumeSuspendedDownload
FtpPutFileEx
InternetSetFilePointer
user32
CharLowerA
MonitorFromWindow
DefMDIChildProcW
SetUserObjectInformationW
SendDlgItemMessageW
gdi32
FillPath
GetOutlineTextMetricsA
EnumObjects
GetCharABCWidthsW
CreateCompatibleBitmap
Arc
CreateColorSpaceA
GetTextCharset
CreateFontA
GetKerningPairs
SetColorSpace
SetICMProfileA
GetWinMetaFileBits
PolyBezier
GetTextExtentExPointW
GetDCOrgEx
StrokeAndFillPath
GetCharABCWidthsFloatA
CreateScalableFontResourceA
EnumICMProfilesA
SetROP2
CloseEnhMetaFile
EqualRgn
CreateBitmapIndirect
comdlg32
ChooseColorW
PrintDlgA
ReplaceTextW
GetFileTitleA
PageSetupDlgA
kernel32
GetProfileIntA
TerminateProcess
LCMapStringW
HeapFree
GetEnvironmentStrings
FillConsoleOutputCharacterA
GetTickCount
TlsGetValue
GetCPInfo
GetOEMCP
HeapAlloc
VirtualQuery
IsBadWritePtr
GetStdHandle
WaitNamedPipeW
SetComputerNameA
SetHandleCount
CompareStringA
FreeEnvironmentStringsW
GetCommandLineA
EnumDateFormatsW
TlsAlloc
WriteProfileStringA
HeapReAlloc
MultiByteToWideChar
LeaveCriticalSection
lstrlenW
GetStringTypeW
GetACP
UnhandledExceptionFilter
ExitProcess
GetCurrentProcessId
VirtualAlloc
VirtualFree
LoadLibraryA
DeleteCriticalSection
GetModuleFileNameA
WaitForSingleObject
OutputDebugStringW
GetLastError
WideCharToMultiByte
HeapCreate
GetEnvironmentStringsW
WritePrivateProfileStructA
LCMapStringA
WriteFile
GetStringTypeA
GetModuleHandleA
EnterCriticalSection
GetFileType
GetTimeFormatW
GetCurrentProcess
HeapDestroy
TlsFree
GetCurrentThreadId
SetLastError
GetThreadSelectorEntry
FreeEnvironmentStringsA
CreateSemaphoreW
GetCurrentThread
GetSystemTimeAsFileTime
GetProcAddress
InterlockedExchange
FillConsoleOutputAttribute
RtlUnwind
CreateDirectoryExW
LoadLibraryW
GetStartupInfoA
InitializeCriticalSection
GlobalSize
TlsSetValue
GetVersion
QueryPerformanceCounter
GlobalReAlloc
Sections
.text Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 267KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ