Static task
static1
Behavioral task
behavioral1
Sample
98139e29167bfb680e0f39a1a13cdea48661af89885c79b3847838ec197cb483.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
98139e29167bfb680e0f39a1a13cdea48661af89885c79b3847838ec197cb483.exe
Resource
win10v2004-20220812-en
General
-
Target
98139e29167bfb680e0f39a1a13cdea48661af89885c79b3847838ec197cb483
-
Size
800KB
-
MD5
6eac66a4053f5249e0520e8f41b39d00
-
SHA1
ab40c46b9ba013f9e01e665805cb6597f07e8c34
-
SHA256
98139e29167bfb680e0f39a1a13cdea48661af89885c79b3847838ec197cb483
-
SHA512
f3b8ef7d91f28c4f74e9705ce0cb00c5426899001c3719fe3f20b8fd4d8833e30a02a839c33671b112a2708d881f83faafdc2bf9aacee01e5333296400ee648c
-
SSDEEP
12288:G26iqlu55OZSstDkuADxIgo2bzPsKl+HsvO1b04IW5vrvXOzWutZviAPSplI9mRC:RqlBSs3GbzXGuW5vr/gF1iAKplkm
Malware Config
Signatures
Files
-
98139e29167bfb680e0f39a1a13cdea48661af89885c79b3847838ec197cb483.exe windows x86
1897275d31550fcaa9f02b70b5dd3c98
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
MapViewOfFile
IsValidCodePage
FindResourceW
GetExitCodeThread
CreateDirectoryW
GetTickCount
GetCurrentProcess
GetFileAttributesA
RemoveDirectoryW
GetStringTypeA
TlsGetValue
FindClose
GetLocaleInfoW
GetFileAttributesA
SetLastError
HeapFree
VirtualProtect
SuspendThread
SetPriorityClass
LocalLock
user32
IsDialogMessageA
DispatchMessageA
IsWindow
GetWindowLongW
PeekMessageW
PostMessageW
SetCursor
LoadCursorA
LoadImageW
wsprintfW
SetFocus
GetWindowTextW
DefDlgProcA
msctf
TF_InitSystem
DllUnregisterServer
DllCanUnloadNow
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 699KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE