Static task
static1
Behavioral task
behavioral1
Sample
02190224eb4250035e07a4ec3d3eed54e623132e68ffc6d442ab0e504de6c4cc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
02190224eb4250035e07a4ec3d3eed54e623132e68ffc6d442ab0e504de6c4cc.exe
Resource
win10v2004-20220901-en
General
-
Target
02190224eb4250035e07a4ec3d3eed54e623132e68ffc6d442ab0e504de6c4cc
-
Size
1.2MB
-
MD5
98ae9e58c1a0f040ed370ba19479e73a
-
SHA1
781742595212ae3cd0341f5ee923774861dd2a63
-
SHA256
02190224eb4250035e07a4ec3d3eed54e623132e68ffc6d442ab0e504de6c4cc
-
SHA512
f331dd076e6c94f8ed557e6424f9951fa96d34e47695793b3d7fa36745f4e972b8cceaee0b7d41c6d2ad9ab9f8f87f4d3b49973ef9dd4e8932ebf34eae33056d
-
SSDEEP
24576:yA8un+X3wzL8TBsV6Ng4+/T2aJlL0xtWrLqmEeHeMMMMMMMMMMMMMMMMMMJFwiK9:yqIVuRTTJ6fFmcMMMMMMMMMMMMMMMMMd
Malware Config
Signatures
Files
-
02190224eb4250035e07a4ec3d3eed54e623132e68ffc6d442ab0e504de6c4cc.exe windows x86
9b0221e9e5dd27417576d6248816d756
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenJobObjectA
LZClose
GetLogicalDriveStringsA
GetTempPathA
GetTickCount
GlobalFix
GetVolumePathNamesForVolumeNameA
CreateNamedPipeA
GetConsoleTitleA
CreateProcessA
OpenSemaphoreA
EndUpdateResourceA
GetTempFileNameA
DeviceIoControl
GetExitCodeProcess
ChangeTimerQueueTimer
GetPriorityClass
VirtualAllocEx
GetVolumePathNameA
GetConsoleOutputCP
GetNumberOfConsoleMouseButtons
RtlMoveMemory
EnumResourceNamesA
GetConsoleInputExeNameA
GetComputerNameA
OpenFileMappingA
HeapDestroy
SetVDMCurrentDirectories
CreateTimerQueue
IsDebuggerPresent
LocalAlloc
WaitForMultipleObjects
GetLastError
FormatMessageA
SetEvent
SetProcessPriorityBoost
GetProcessHeap
CopyFileExW
GetCurrentDirectoryA
dpmodemx
SPInit
advapi32
CredFree
user32
SystemParametersInfoA
UpdateLayeredWindow
FindWindowExW
GetClassNameA
MessageBeep
ToUnicode
DestroyWindow
GetWindow
SetWindowsHookExW
LoadLocalFonts
CharLowerA
GetInputDesktop
GetKeyState
MapVirtualKeyExA
GetMenuItemInfoA
CharToOemBuffA
DrawFrame
SetWindowStationUser
InflateRect
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 645KB - Virtual size: 1001KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 321KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ