Static task
static1
Behavioral task
behavioral1
Sample
398a2836fcd1e3b47fbb2ab37a772ff127ce41f6757bce42a42f917c7afca116.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
398a2836fcd1e3b47fbb2ab37a772ff127ce41f6757bce42a42f917c7afca116.exe
Resource
win10v2004-20220901-en
General
-
Target
398a2836fcd1e3b47fbb2ab37a772ff127ce41f6757bce42a42f917c7afca116
-
Size
186KB
-
MD5
5c51157a71db9dc58779866cf66a8570
-
SHA1
baed87d44cfab4c36a874670f8a195cddee2e5c9
-
SHA256
398a2836fcd1e3b47fbb2ab37a772ff127ce41f6757bce42a42f917c7afca116
-
SHA512
5dfe4c8f383e7b0a0bec62ff1e12d993e085698bfcd15021fa80c2bec8e231771d7676eecf43c915cc687e0acb9c945871ce930e356255d55d66d51564abf88e
-
SSDEEP
3072:oaMUQPzXRarYU9a0Orv94RdM4vWHO69D/4LIk7PVQzJy8rm0lSca:oa2PlSReoqC76b1
Malware Config
Signatures
Files
-
398a2836fcd1e3b47fbb2ab37a772ff127ce41f6757bce42a42f917c7afca116.exe windows x86
efe7b064e500985c4a33b984c215613f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
WaitForSingleObject
VirtualFree
lstrcmpiA
EnterCriticalSection
HeapAlloc
GetDateFormatA
GetModuleFileNameA
GlobalAddAtomA
HeapFree
GetModuleHandleA
LoadLibraryA
lstrcpyA
SetFilePointer
SizeofResource
CreateThread
GetUserDefaultLCID
GetACP
LocalReAlloc
GetProcessHeap
DeleteFileA
GetCurrentThreadId
MulDiv
GetOEMCP
RaiseException
GetProcAddress
FreeLibrary
ExitProcess
SetThreadLocale
DeleteCriticalSection
GetDiskFreeSpaceA
LockResource
lstrlenW
GetLocaleInfoA
GetCommandLineA
GetThreadLocale
GetModuleHandleW
FindFirstFileA
GetCurrentProcess
GetFileAttributesA
lstrcatA
GlobalAlloc
SetLastError
GetCPInfo
SetHandleCount
GetEnvironmentStrings
WideCharToMultiByte
LoadLibraryExA
LocalAlloc
HeapDestroy
GetStdHandle
ResetEvent
VirtualAlloc
ExitThread
GetLocalTime
VirtualAllocEx
InitializeCriticalSection
GlobalFindAtomA
user32
DrawIconEx
EnumWindows
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 144KB - Virtual size: 215KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ