Static task
static1
Behavioral task
behavioral1
Sample
98c526bd71b1f5936fea7f5e87147d6681e75710d12327a748ed2f5520b6d51e.exe
Resource
win7-20221111-en
General
-
Target
98c526bd71b1f5936fea7f5e87147d6681e75710d12327a748ed2f5520b6d51e
-
Size
900KB
-
MD5
3b22978269831fde0f19d1521729d230
-
SHA1
429946bb188270cdba4498ce3ef6821c369a8639
-
SHA256
98c526bd71b1f5936fea7f5e87147d6681e75710d12327a748ed2f5520b6d51e
-
SHA512
19527d46f725fa8dc7a2841549fd1ce516d67028fab343bdf53b4e28854b65ac3b25153fd604c9e3a485604976b57eae6967ab12c20b9f5918477eb8dc945c86
-
SSDEEP
12288:7ZHj9KDqROdgXv7tx/MvIezifxZUM0FmWSwpTHNU:7hj8QOadDZn0IWTHNU
Malware Config
Signatures
Files
-
98c526bd71b1f5936fea7f5e87147d6681e75710d12327a748ed2f5520b6d51e.exe windows x86
cc739cf9e1aa5387e5fef71c1c6d0362
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetConnectW
InternetOpenW
InternetCloseHandle
FtpFindFirstFileW
InternetReadFile
FtpOpenFileW
InternetGetLastResponseInfoW
FtpSetCurrentDirectoryW
kernel32
FindFirstFileW
DuplicateHandle
GetCurrentProcess
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFullPathNameW
GetThreadLocale
GetFileTime
WritePrivateProfileStringW
SetErrorMode
GetStartupInfoW
ExitProcess
GetTimeZoneInformation
RtlUnwind
RaiseException
TerminateProcess
HeapReAlloc
HeapSize
SetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetStartupInfoA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
FindClose
LCMapStringA
LCMapStringW
IsBadCodePtr
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
CreateEventW
CloseHandle
GetLastError
WaitForSingleObject
SetEvent
ResetEvent
CreateThread
Sleep
DeviceIoControl
CreateFileW
CreateMutexW
ReleaseMutex
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
IsBadWritePtr
IsBadReadPtr
DeleteCriticalSection
DeleteFileW
GetTickCount
WriteFile
SetLastError
ReadFile
SetFilePointer
GetFileSize
MoveFileExW
CreateProcessW
MultiByteToWideChar
HeapAlloc
GetProfileStringA
GlobalAddAtomA
FindResourceA
CreateFileA
SizeofResource
GlobalFlags
lstrcmpiW
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
lstrcmpW
GlobalAlloc
lstrcmpA
lstrcmpiA
GetCurrentThread
MulDiv
LocalAlloc
lstrcpynW
lstrcatW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrcpyW
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceW
LoadResource
FileTimeToLocalFileTime
lstrlenW
GetModuleFileNameA
GetPrivateProfileStringA
GetProcessHeap
GetExitCodeProcess
GetTempPathW
GetTempFileNameW
GetLongPathNameW
LoadLibraryA
lstrlenA
LocalFree
GetFileSizeEx
GetFileAttributesExW
SetFileTime
GetWindowsDirectoryA
GetVolumeNameForVolumeMountPointA
OpenMutexW
GetWindowsDirectoryW
CreateSemaphoreW
GetSystemDirectoryW
GetVolumeInformationW
GetLocaleInfoW
InterlockedExchangeAdd
ReleaseSemaphore
FormatMessageW
GetSystemDefaultLangID
GetCurrentThreadId
ResumeThread
InterlockedDecrement
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
OutputDebugStringA
GetVersion
GetFileAttributesW
GetModuleHandleA
LoadLibraryW
GetProcAddress
FileTimeToSystemTime
InterlockedIncrement
GetSystemTimeAsFileTime
HeapFree
WideCharToMultiByte
VirtualAlloc
user32
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableW
CharNextW
CharUpperW
InflateRect
PtInRect
GetClassNameW
GetSysColorBrush
LoadCursorW
SetWindowContextHelpId
GetMessageW
TranslateMessage
ValidateRect
GetCursorPos
SetCursor
PostQuitMessage
GrayStringW
DrawTextW
TabbedTextOutW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
DestroyMenu
GetDesktopWindow
MapDialogRect
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
PostThreadMessageW
LoadBitmapW
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
UpdateWindow
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageW
DispatchMessageW
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
IsWindowVisible
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
DrawTextA
DrawFocusRect
GetClassInfoA
DefDlgProcA
DefWindowProcA
GetTopWindow
IsChild
GetCapture
WinHelpW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthW
GetWindowTextW
GetDlgCtrlID
GetKeyState
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
SetPropW
GetPropW
RegisterClipboardFormatW
InvalidateRect
GetMenuCheckMarkDimensions
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongW
SetWindowPos
RegisterWindowMessageW
OffsetRect
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
IntersectRect
SystemParametersInfoW
GetWindowPlacement
GetWindowRect
CopyRect
GetDC
ReleaseDC
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetParent
GetWindowLongW
GetDlgItem
IsWindowEnabled
LoadStringW
UnhookWindowsHookEx
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuW
LoadIconW
EnableWindow
wsprintfW
KillTimer
SendMessageW
SetTimer
IsWindow
SendMessageTimeoutW
MessageBoxW
PostMessageW
HideCaret
GetWindowTextLengthA
UnregisterClassW
gdi32
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox
ExtTextOutA
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateDIBitmap
PatBlt
comdlg32
GetFileTitleW
GetOpenFileNameW
GetSaveFileNameW
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
advapi32
RegQueryValueExW
RegOpenKeyExW
RegFlushKey
RegOpenKeyExA
RegSetValueExW
GetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetSidSubAuthority
InitializeSid
RegCloseKey
RegCreateKeyExW
RegSetValueExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetSidLengthRequired
comctl32
ord17
oledlg
OleUIBusyW
ole32
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
olepro32
ord253
oleaut32
SysStringLen
SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
wsock32
WSAStartup
WSACleanup
WSASetLastError
inet_addr
socket
connect
accept
recv
shutdown
closesocket
gethostbyname
WSAGetLastError
htons
ioctlsocket
send
Sections
.text Size: 360KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 40KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 424KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE