Static task
static1
Behavioral task
behavioral1
Sample
98211f79169109a84ee20f669b8e706cb686af5e96334102494c30f56af66276.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
98211f79169109a84ee20f669b8e706cb686af5e96334102494c30f56af66276.exe
Resource
win10v2004-20220901-en
General
-
Target
98211f79169109a84ee20f669b8e706cb686af5e96334102494c30f56af66276
-
Size
326KB
-
MD5
5cf8117e80f663a8b6a7e33f4c612722
-
SHA1
d7f4a0f14b2988182fc94149138efaf4a3fc6b88
-
SHA256
98211f79169109a84ee20f669b8e706cb686af5e96334102494c30f56af66276
-
SHA512
db6e016f7083af5865752cc4f05dc510f7f95d8fb92cad007f504014ef7c69700953fd1f244e07863add6ed990f9371a036d659bb4cb416a64fbcd920adf3fd1
-
SSDEEP
6144:f2NnST7igDMnsXLffm5mbdnsRKr18Id8R0A8fu9+ek7oJLS8O2sq:f2p87TDJXLffmudoKr1Z8ihfu5k70Lkp
Malware Config
Signatures
Files
-
98211f79169109a84ee20f669b8e706cb686af5e96334102494c30f56af66276.exe windows x86
7462d671722e5020914dbc5ed015c7ed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
GetDriveTypeA
LoadLibraryExW
DeleteCriticalSection
GetLastError
GetCommandLineA
TlsGetValue
CreateMutexA
GetModuleHandleA
Sleep
CloseHandle
ReleaseMutex
GetExitCodeProcess
GetDiskFreeSpaceExW
FreeConsole
SetLastError
GetTickCount
GetComputerNameA
VirtualProtect
EnumResourceTypesA
shell32
DllUnregisterServer
ExtractIconA
SHGetMalloc
SHFree
SHGetDiskFreeSpaceA
DragQueryFileA
DragFinish
DuplicateIcon
ShellMessageBoxA
SHGetSettings
DragAcceptFiles
ShellAboutA
StrChrA
printui
bFolderGetPrinter
PnPInterface
vQueueCreate
vPrinterPropPages
bPrinterSetup
user32
MessageBoxA
Sections
.text Size: 1024B - Virtual size: 616B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ