Static task
static1
Behavioral task
behavioral1
Sample
a98efdb66c56504b2e47036eed895c68933bc56915a2ebdc98cfbd3b5f35aa05.exe
Resource
win7-20220812-en
General
-
Target
a98efdb66c56504b2e47036eed895c68933bc56915a2ebdc98cfbd3b5f35aa05
-
Size
100KB
-
MD5
0b1808c1fa8afa8d1ce1e1a7ffade020
-
SHA1
871fde9276bd9d11cc055908dbbd34c6cd105b15
-
SHA256
a98efdb66c56504b2e47036eed895c68933bc56915a2ebdc98cfbd3b5f35aa05
-
SHA512
19f97f41023a36d9873c84dd340b724a41212c5d80ecd122959f4339412ee351da03d938c02e59cc4fb58249ad0841a69527bbfdb9ba08f3b0e1146c0648855e
-
SSDEEP
3072:L3lSm2hKJWaORyJgpCxSeIKZCCxFAOB35x:jlSgWaOaucCCHAOB3b
Malware Config
Signatures
Files
-
a98efdb66c56504b2e47036eed895c68933bc56915a2ebdc98cfbd3b5f35aa05.exe windows x86
b9e2c14cee409cbb5b812880dae0acae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueExA
RegNotifyChangeKeyValue
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyA
RegDeleteValueA
wininet
InternetTimeToSystemTime
InternetTimeFromSystemTime
kernel32
MultiByteToWideChar
GetStartupInfoA
GetModuleHandleA
CloseHandle
CreateProcessA
WaitForMultipleObjects
CreateEventA
lstrcatA
lstrlenA
GetModuleFileNameA
GetLastError
CreateMutexA
GetCommandLineA
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
ReadFile
SetHandleInformation
CreatePipe
WriteFile
SetFilePointer
CreateFileA
GetTempPathA
GetThreadLocale
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcpynA
SystemTimeToTzSpecificLocalTime
GetSystemTime
GetVersionExA
lstrcmpiA
SetEvent
WideCharToMultiByte
lstrlenW
GetCurrentProcess
user32
wsprintfA
ole32
CLSIDFromString
CoUninitialize
CoTaskMemFree
StringFromCLSID
CoCreateGuid
CoInitialize
msvcrt
fgetc
fclose
_stricmp
_controlfp
__set_app_type
__p__fmode
__p__commode
strrchr
sprintf
??3@YAXPAX@Z
mktime
localtime
time
asctime
strstr
_adjust_fdiv
strncpy
__setusermatherr
fopen
__CxxFrameHandler
_EH_prolog
_initterm
_except_handler3
srand
rand
sscanf
free
malloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE