Static task
static1
Behavioral task
behavioral1
Sample
9998f53893fbf13bb294474df3ffe7d07364470464e6f2361c08d66858f8c226.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9998f53893fbf13bb294474df3ffe7d07364470464e6f2361c08d66858f8c226.exe
Resource
win10v2004-20220812-en
General
-
Target
9998f53893fbf13bb294474df3ffe7d07364470464e6f2361c08d66858f8c226
-
Size
596KB
-
MD5
550cf7007612cc86144b875233bbd0e5
-
SHA1
8361036551a705d69dd0a9a26a4d8c3a16e28006
-
SHA256
9998f53893fbf13bb294474df3ffe7d07364470464e6f2361c08d66858f8c226
-
SHA512
7580b32bec27ce8fb02068b06624e0be48efce5cf11995e16c36b51908f54b0b15d1ac4ef751607cb3cfdeb9ed6f36f6793e7cb659c7e767c475c32cc5422af8
-
SSDEEP
12288:jwYeZHF0mN26+W4+0VS3LTgK8kBAGV0Zn4DeMm4AO3deSk0:jwY2F0mQW+VWgvkBh0Z4DxA0di0
Malware Config
Signatures
Files
-
9998f53893fbf13bb294474df3ffe7d07364470464e6f2361c08d66858f8c226.exe windows x86
36e3bf18408dd775eefb45664f944e1e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetCommandLineA
GetCurrentThreadId
GetCurrentProcessId
GetTickCount
GetModuleHandleA
GetCurrentThread
GetVersion
ExitProcess
HeapAlloc
GetProcessHeap
LeaveCriticalSection
WriteConsoleW
VirtualAlloc
TlsSetValue
SetEndOfFile
FindClose
CreateEventA
VirtualFree
GlobalAlloc
HeapCreate
CreateProcessA
TerminateProcess
GetModuleHandleW
GetStringTypeW
GetACP
GetSystemTimeAsFileTime
CloseHandle
InterlockedIncrement
WriteFile
SetUnhandledExceptionFilter
ReadFile
SetFilePointer
TlsFree
WideCharToMultiByte
UnhandledExceptionFilter
DeleteCriticalSection
GetModuleFileNameA
GetVersionExA
GetEnvironmentStringsW
TlsAlloc
IsDebuggerPresent
SetEvent
LCMapStringW
HeapFree
HeapSize
user32
DestroyWindow
GetFocus
ClientToScreen
GetWindowLongA
LoadCursorA
SendMessageA
GetSystemMetrics
ReleaseDC
GetKeyState
GetDC
GetSysColor
TranslateMessage
SetWindowLongA
MessageBoxA
RegisterClassA
SetWindowPos
LoadBitmapA
GetParent
Sections
.text Size: 560KB - Virtual size: 883KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ