Static task
static1
Behavioral task
behavioral1
Sample
498ab54b7dad77da5e6faad1e7faac94ea3c8d6fcfb45772649081b538ba7cd9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
498ab54b7dad77da5e6faad1e7faac94ea3c8d6fcfb45772649081b538ba7cd9.exe
Resource
win10v2004-20220901-en
General
-
Target
498ab54b7dad77da5e6faad1e7faac94ea3c8d6fcfb45772649081b538ba7cd9
-
Size
159KB
-
MD5
3b72b51863b65a548e1a371dc014b5fd
-
SHA1
62ac2276ffb1959bdef0ff3f75d6c5b8c86c9788
-
SHA256
498ab54b7dad77da5e6faad1e7faac94ea3c8d6fcfb45772649081b538ba7cd9
-
SHA512
245e69ec89d447140cc6d6f0c99f1ac5cdc196f9b94ce468890ab85f39edce0ea4121387d684506abb7b9b5d711d5f104d94a56bc9bc44084cbb858a813b2f10
-
SSDEEP
3072:zuURPSYdti6wiyEwxGxYQthRk2cIo1hkInNYpHslqq0gNzzSwoWrmuyO2if:l2LU7k2cLOInhqn4zz1
Malware Config
Signatures
Files
-
498ab54b7dad77da5e6faad1e7faac94ea3c8d6fcfb45772649081b538ba7cd9.exe windows x86
16bb4eca4f1f3be888890cbec3d8d677
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowCursor
MapWindowPoints
GetKeyState
CallNextHookEx
GetMenuItemCount
UpdateWindow
GetScrollRange
GetSysColorBrush
FindWindowA
DispatchMessageA
CreatePopupMenu
EnumWindows
DrawIconEx
CharLowerA
CallWindowProcA
SetPropA
AdjustWindowRectEx
ShowOwnedPopups
RegisterClipboardFormatA
GetSystemMetrics
EndPaint
GetDesktopWindow
LoadCursorA
LoadIconA
GetWindowTextA
IsIconic
LoadStringA
GetSysColor
PostQuitMessage
GetCursorPos
BeginPaint
kernel32
MulDiv
GetCommandLineA
GlobalFree
VirtualQuery
ExitProcess
GetSystemTime
GetUserDefaultLangID
IsBadCodePtr
VirtualProtect
GetFileAttributesA
FileTimeToSystemTime
GetFileAttributesW
WaitForMultipleObjects
GetModuleHandleA
GetCurrentProcess
CreateProcessW
GetLocalTime
GetEnvironmentStrings
GetModuleHandleW
SetStdHandle
DuplicateHandle
CreateDirectoryA
msvcrt
malloc
_stricmp
_initterm
realloc
__p___initenv
_write
strncmp
__getmainargs
fprintf
__setusermatherr
__p__commode
_onexit
strrchr
memmove
_adjust_fdiv
_controlfp
_strnicmp
__set_app_type
_vsnprintf
signal
atexit
strstr
__p__fmode
_XcptFilter
fclose
_setmode
_exit
__dllonexit
_except_handler3
_snprintf
fwrite
advapi32
GetLengthSid
EqualSid
LookupPrivilegeValueA
InitiateSystemShutdownA
RegCreateKeyExA
SetSecurityDescriptorDacl
GetUserNameA
DeregisterEventSource
RegSetValueExA
CryptDestroyHash
CloseServiceHandle
RevertToSelf
FreeSid
RegEnumKeyW
RegEnumKeyExA
SetSecurityDescriptorOwner
RegSetValueExW
DeleteService
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ