Static task
static1
Behavioral task
behavioral1
Sample
c98ffd42f4833bd14e50a8dcb0af2209287be80695795755681168da46057ef6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c98ffd42f4833bd14e50a8dcb0af2209287be80695795755681168da46057ef6.exe
Resource
win10v2004-20220812-en
General
-
Target
c98ffd42f4833bd14e50a8dcb0af2209287be80695795755681168da46057ef6
-
Size
36KB
-
MD5
241b1dd2cfd9aa2470013c2a8a68bd30
-
SHA1
1efe50de0882bb0e388aa60ca342cad639055e78
-
SHA256
c98ffd42f4833bd14e50a8dcb0af2209287be80695795755681168da46057ef6
-
SHA512
c127683da094b1c32b06c1cc3b01a89e234ba9e1faa3c65d26907a9e7f18714fd5f14ec29f57f4dd340408463446cf81a9e8c25f4a76320dff41b7dad5be3fde
-
SSDEEP
768:GERJviHbJFmUD9tYG4WOHVeXtNNoqGYyUv/JxWT14tyLRf35:pJvaJAuL4pYsqVyUv/nWT14tM
Malware Config
Signatures
Files
-
c98ffd42f4833bd14e50a8dcb0af2209287be80695795755681168da46057ef6.exe windows x86
5f0a2ad930983255a033ddabe2ac0a4a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetWindowsDirectoryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapSetInformation
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
msvcrt
__p__fmode
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_controlfp
shell32
ShellExecuteA
shlwapi
PathAppendA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qxecsgn Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE