Static task
static1
Behavioral task
behavioral1
Sample
98ca70de5b30d00e87edbf55284fe994e99a3876234aba6f7fa9e5145247c981.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
98ca70de5b30d00e87edbf55284fe994e99a3876234aba6f7fa9e5145247c981.exe
Resource
win10v2004-20221111-en
General
-
Target
98ca70de5b30d00e87edbf55284fe994e99a3876234aba6f7fa9e5145247c981
-
Size
347KB
-
MD5
c1c36991d1c589a6a8d67fe25159e26d
-
SHA1
5511758d6acbd8eeae6a51d623d10646153be36e
-
SHA256
98ca70de5b30d00e87edbf55284fe994e99a3876234aba6f7fa9e5145247c981
-
SHA512
5164c576c28b9490c8b8289fab9413aaa2218fb96a805ca18c5f360fb6e69b13973faef094197b77ebc35e8435b8c0ada0155d2b6ee8e6de568e35b76a2a2ac4
-
SSDEEP
6144:b0iiSGdvRtmF0dlqbYS6WqQjoxpiFuF3amnZM76zCrCVmWz:b0iqp/0UsqQjAiUF5nS76eu
Malware Config
Signatures
Files
-
98ca70de5b30d00e87edbf55284fe994e99a3876234aba6f7fa9e5145247c981.exe windows x86
92953b1ad4599a9f7fbb832f9672d477
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterClassA
GetCursorInfo
DestroyIcon
GetNextDlgTabItem
TrackPopupMenu
CopyAcceleratorTableA
EnumDesktopsA
MessageBoxA
DefWindowProcA
FlashWindow
DdeCmpStringHandles
InsertMenuItemA
GetAncestor
EnumThreadWindows
IsClipboardFormatAvailable
GetKeyState
DestroyWindow
LoadBitmapA
EnumDisplaySettingsW
ToAsciiEx
TrackMouseEvent
RegisterClassExA
InSendMessage
PostMessageA
GetClassWord
CreateWindowExW
DdeConnect
SetWindowTextW
SetCapture
GetMessageTime
ShowWindow
comctl32
CreatePropertySheetPage
_TrackMouseEvent
ImageList_Copy
DrawStatusTextA
CreateUpDownControl
ImageList_DragLeave
ImageList_GetImageInfo
ImageList_BeginDrag
ImageList_AddIcon
ImageList_Duplicate
ImageList_DrawIndirect
DestroyPropertySheetPage
ImageList_GetIconSize
ImageList_DragShowNolock
ImageList_SetImageCount
ImageList_DrawEx
ImageList_Replace
CreateStatusWindow
ImageList_Remove
InitCommonControlsEx
MakeDragList
ImageList_LoadImageA
ImageList_LoadImage
ImageList_Create
ImageList_GetFlags
wininet
FreeUrlCacheSpaceW
FindNextUrlCacheEntryExA
GopherGetLocatorTypeA
GetUrlCacheEntryInfoExA
kernel32
GetCommandLineA
LoadLibraryA
SetStdHandle
GetCurrentThread
GetProcAddress
GlobalReAlloc
FreeEnvironmentStringsW
GetLocaleInfoA
VirtualQuery
SetLastError
GetVersionExA
RaiseException
SetHandleCount
InterlockedExchange
VirtualFree
SetVolumeLabelA
FlushConsoleInputBuffer
CreateMutexA
GetCurrentProcessId
QueryPerformanceCounter
VirtualProtect
WriteConsoleOutputCharacterW
lstrcmp
GetPrivateProfileStringW
GetDiskFreeSpaceExA
IsBadWritePtr
LoadLibraryExW
FreeEnvironmentStringsA
UnhandledExceptionFilter
WriteFile
GetStringTypeA
TlsAlloc
CompareStringA
SetConsoleOutputCP
CompareStringW
GetCurrencyFormatA
LeaveCriticalSection
GetConsoleCursorInfo
HeapDestroy
SetComputerNameA
ExitProcess
GetStringTypeExA
GetTickCount
GetEnvironmentVariableW
GlobalAlloc
HeapFree
LCMapStringW
FlushFileBuffers
VirtualAllocEx
SetEnvironmentVariableA
GetACP
GetLastError
WriteConsoleA
HeapReAlloc
IsValidLocale
GetFileType
GetModuleHandleA
GetSystemTimeAsFileTime
lstrcat
SetFilePointer
GetProcessHeap
LCMapStringA
GetModuleFileNameA
TlsGetValue
IsValidCodePage
DeleteCriticalSection
GetThreadLocale
HeapCreate
ReadFile
EnumDateFormatsExA
VirtualUnlock
GetProfileIntW
MultiByteToWideChar
GetDiskFreeSpaceW
OpenMutexA
FreeLibraryAndExitThread
GetOEMCP
GetCurrentThreadId
OutputDebugStringA
GetThreadSelectorEntry
GetStdHandle
OpenFile
ReadConsoleW
CreateSemaphoreA
lstrcmpA
GetCPInfo
GetDateFormatA
HeapSize
LocalSize
CreateDirectoryW
EnumCalendarInfoW
InitializeCriticalSection
RtlUnwind
CloseHandle
GetStartupInfoA
GetStringTypeW
GetSystemTime
GetLocaleInfoW
TerminateProcess
TlsFree
GetTimeFormatA
GetUserDefaultLCID
WideCharToMultiByte
EnumSystemLocalesA
GetSystemInfo
SetLocalTime
GetEnvironmentStringsW
HeapAlloc
GetTimeZoneInformation
FormatMessageA
EnterCriticalSection
VirtualAlloc
GetConsoleCP
GetCurrentProcess
SleepEx
TlsSetValue
GetEnvironmentStrings
Sections
.text Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 90KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ