Static task
static1
Behavioral task
behavioral1
Sample
598bec6c4f5aa0c705ad56c5fee97de5c2cf2b1d87ab5d326d7379cddab75c63.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
598bec6c4f5aa0c705ad56c5fee97de5c2cf2b1d87ab5d326d7379cddab75c63.exe
Resource
win10v2004-20220901-en
General
-
Target
598bec6c4f5aa0c705ad56c5fee97de5c2cf2b1d87ab5d326d7379cddab75c63
-
Size
366KB
-
MD5
737fc5735eac7b9b5a2d2108f87fdb69
-
SHA1
d7a3bef52914d4dd0a20fad9b08e7a7914e2628b
-
SHA256
598bec6c4f5aa0c705ad56c5fee97de5c2cf2b1d87ab5d326d7379cddab75c63
-
SHA512
6b76f295c884b325ea3d0b9bcbcdc9ca4d5ac180ca18503c3c4a1b8491f5095b11f531cce89b549a9b514003229d16fc841956efeb9906b7cd43cea0ee1f3976
-
SSDEEP
6144:q7YyZtoejJpSwKDlBbCWHuSa4jxc0zA7BEHQg8Q2McRLLQh4INvsYTY9xRzmI+mv:qRto6pStXbNuxzmSBEHQLQ4tIvTU9pBv
Malware Config
Signatures
Files
-
598bec6c4f5aa0c705ad56c5fee97de5c2cf2b1d87ab5d326d7379cddab75c63.exe windows x86
a999effc0f232be96a6a3312598f63e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
RemoveDirectoryA
SetEndOfFile
CompareStringA
HeapAlloc
FreeLibrary
LoadLibraryW
HeapCreate
GetEnvironmentStrings
RaiseException
GetCurrentProcess
LoadResource
GetCurrentThreadId
GetSystemDefaultLangID
GetCommandLineA
GetModuleHandleW
GetVersion
GetCurrentProcessId
GetTickCount
GetUserDefaultLangID
GetLastError
GetSystemDefaultLCID
GetCurrentThread
GetCommandLineW
GetUserDefaultLCID
GetModuleHandleA
VirtualAlloc
lstrlenA
GetStartupInfoA
msvcrt
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
_exit
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 316KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ