Static task
static1
Behavioral task
behavioral1
Sample
998d86f713495bc5e3a66a68f9e9808affeeb365ca172b615b1315bb1bafddd7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
998d86f713495bc5e3a66a68f9e9808affeeb365ca172b615b1315bb1bafddd7.exe
Resource
win10-20220901-en
General
-
Target
998d86f713495bc5e3a66a68f9e9808affeeb365ca172b615b1315bb1bafddd7
-
Size
56.9MB
-
MD5
37ea1ee43c1941c2def4a01e03c76196
-
SHA1
7ebafc7de7c4c5fbb14ab6079888e8ed2943d24e
-
SHA256
998d86f713495bc5e3a66a68f9e9808affeeb365ca172b615b1315bb1bafddd7
-
SHA512
ced4bb5ea30b3fdadff57110b52190a39c20912c4098f3bd3297badaa5aaa681790007d58114a9cdada8d5ac94a294c15ec6ea38462bc1a245b326012c75aae2
-
SSDEEP
1572864:1baMP9neHSHMGPQsnQVNPiOHG3al5pSbwilnghx:1ba41SWPUNaOm2gpghx
Malware Config
Signatures
Files
-
998d86f713495bc5e3a66a68f9e9808affeeb365ca172b615b1315bb1bafddd7.exe windows x86
0f7d0ed8477bf9ca9b4b2ce07e02a90e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathW
GetTempFileNameW
FindResourceW
SizeofResource
LoadResource
LockResource
CreateThread
CreateFileW
DeleteFileW
CreateFileA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
ExitProcess
CreateProcessW
GetLastError
WriteFile
FlushFileBuffers
CloseHandle
GetProcAddress
GetModuleHandleA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapSize
RtlUnwind
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
SetStdHandle
RaiseException
user32
DefWindowProcW
PostQuitMessage
EndPaint
BeginPaint
UpdateWindow
ShowWindow
CreateWindowExW
GetSystemMetrics
RegisterClassExW
GetSysColorBrush
LoadCursorW
PostMessageW
DispatchMessageW
TranslateMessage
GetMessageW
MessageBoxW
InvalidateRect
gdi32
TextOutW
SetBkMode
SelectObject
GetStockObject
DeleteObject
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56.9MB - Virtual size: 56.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ