Static task
static1
Behavioral task
behavioral1
Sample
b998a02e70d32407a11b088895df7b4b7ce44080f3976de2bc90878b4e0f7503.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b998a02e70d32407a11b088895df7b4b7ce44080f3976de2bc90878b4e0f7503.exe
Resource
win10v2004-20220901-en
General
-
Target
b998a02e70d32407a11b088895df7b4b7ce44080f3976de2bc90878b4e0f7503
-
Size
592KB
-
MD5
1f3787a5ee974a70362c47cc14316258
-
SHA1
98bcb00fccc5f4a3fb2bf9313d3cf9010e456017
-
SHA256
b998a02e70d32407a11b088895df7b4b7ce44080f3976de2bc90878b4e0f7503
-
SHA512
dd9a7cb49b62c3bcf20f4a91bc997a986059bc64969c62552503993ba735245935f788d9cc5812f1bbb1cd037d4c56bd8f9f0b1a81128d05ea8c6a316221a369
-
SSDEEP
12288:3A9k52xDUiI6vkak7NqzTq8Ez42ly1f4P3k7TXJH8p+yoWYMgfYprNcTsJykC705:3/UxDUN6vkThq3q8EzzlN3SJcpD
Malware Config
Signatures
Files
-
b998a02e70d32407a11b088895df7b4b7ce44080f3976de2bc90878b4e0f7503.exe windows x86
32340283f5d64112e5ff268288d9182b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
PageSetupDlgA
FindTextW
kernel32
TlsGetValue
GetTickCount
GlobalAddAtomA
GetStdHandle
EnumCalendarInfoExA
lstrcmp
GetPrivateProfileSectionA
GetCPInfo
GetSystemTime
TlsFree
WideCharToMultiByte
VirtualAlloc
GlobalSize
GetCurrentThread
OpenMutexA
ReadFileEx
GetLocaleInfoW
GetDiskFreeSpaceA
HeapAlloc
GetStringTypeW
FreeResource
InterlockedExchange
UnhandledExceptionFilter
InitializeCriticalSection
GetVolumeInformationA
WriteConsoleInputW
QueryPerformanceCounter
FormatMessageW
InterlockedDecrement
GetFileType
CompareStringA
GetModuleHandleA
GetPriorityClass
HeapDestroy
ReadFile
lstrcpynW
TerminateProcess
lstrcpy
LeaveCriticalSection
GlobalReAlloc
GetFileAttributesW
DeleteCriticalSection
GetModuleFileNameA
RtlUnwind
WriteFile
LCMapStringA
FreeEnvironmentStringsA
GetLocalTime
GetLastError
GetACP
CommConfigDialogA
ExitProcess
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
VirtualLock
EnterCriticalSection
GetEnvironmentVariableA
SetHandleCount
FreeEnvironmentStringsW
GetTimeZoneInformation
LocalFileTimeToFileTime
HeapCreate
GetStartupInfoA
GetPrivateProfileStringW
SetEnvironmentVariableA
GetPrivateProfileSectionNamesW
WaitForDebugEvent
InterlockedIncrement
GetCurrentDirectoryW
SetSystemTime
CompareStringW
HeapFree
GetProcAddress
GetOEMCP
GetEnvironmentStringsW
GetSystemTimeAsFileTime
LCMapStringW
SetConsoleTitleA
VirtualFree
GlobalFree
GetModuleHandleW
FlushFileBuffers
LoadLibraryA
GetCurrentThreadId
ExpandEnvironmentStringsW
TransmitCommChar
GetStringTypeA
GetCurrentProcess
SetStdHandle
MultiByteToWideChar
SetLastError
GetCurrentDirectoryA
GetEnvironmentStrings
GetCurrentProcessId
GetTempPathW
LoadLibraryW
GetCommandLineA
HeapReAlloc
VirtualQuery
lstrlen
CreateMutexA
GetConsoleTitleA
TlsSetValue
LoadModule
GetDateFormatW
GetCalendarInfoA
CloseHandle
lstrcmpi
IsBadWritePtr
SetFilePointer
GetVersion
TlsAlloc
user32
SetClassLongW
FindWindowExA
CharLowerBuffA
RegisterClassExW
ShowWindow
CallWindowProcA
LockWindowUpdate
SetWindowsHookExW
SetMenuDefaultItem
DialogBoxParamA
CreateIconIndirect
UnhookWindowsHookEx
MessageBoxA
GetParent
CreateCaret
SwapMouseButton
BroadcastSystemMessageW
GetMenuState
MapVirtualKeyExA
RegisterClassA
GetClientRect
GetFocus
MapWindowPoints
SetLastErrorEx
EnableScrollBar
DdeCmpStringHandles
DestroyWindow
CreateWindowExW
RegisterClassExA
DefWindowProcW
OemToCharBuffW
PostMessageA
comctl32
ImageList_Duplicate
ImageList_GetBkColor
InitCommonControlsEx
GetEffectiveClientRect
ImageList_BeginDrag
ImageList_ReplaceIcon
ImageList_Copy
ImageList_DragEnter
ImageList_AddIcon
DrawInsert
ImageList_LoadImageW
ImageList_GetFlags
ImageList_AddMasked
CreateMappedBitmap
InitMUILanguage
CreatePropertySheetPage
ImageList_SetFlags
ImageList_Remove
ImageList_Write
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 249KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ