Static task
static1
Behavioral task
behavioral1
Sample
998172109ed7ae87bd30d6fb91c1443ac89bdece445c5b9a6d604cef4c0eff9d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
998172109ed7ae87bd30d6fb91c1443ac89bdece445c5b9a6d604cef4c0eff9d.exe
Resource
win10v2004-20221111-en
General
-
Target
998172109ed7ae87bd30d6fb91c1443ac89bdece445c5b9a6d604cef4c0eff9d
-
Size
1.4MB
-
MD5
2f425a5e8c6c5ec49cd213cf9cf6716d
-
SHA1
618a636b75547a95c3c1b14671da98c0cbded78c
-
SHA256
998172109ed7ae87bd30d6fb91c1443ac89bdece445c5b9a6d604cef4c0eff9d
-
SHA512
90606791a11b010379b72a089f78218259abef9909153e272f59f317583047bc8583b46357aa66f36ff7359091f086358182b1915be1be033bd32d19595e357d
-
SSDEEP
12288:iFBAXcgC0xl3vvM7X/OiynAbSj8WsZASykvETBbECzxkhnyZmVZr7eXDAn7IUvX4:uB/i73KPteLeAKalECzxGn4m/rqmKn9
Malware Config
Signatures
Files
-
998172109ed7ae87bd30d6fb91c1443ac89bdece445c5b9a6d604cef4c0eff9d.exe windows x86
3b197997253fc83ff4413ae685bb7b8b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ClearCommError
IsBadHugeWritePtr
EnumResourceNamesA
GetThreadSelectorEntry
SetConsoleNumberOfCommandsA
GetCPInfo
VerSetConditionMask
GetWindowsDirectoryA
GetSystemWindowsDirectoryA
IsProcessorFeaturePresent
OpenFileMappingA
GetWriteWatch
OpenThread
GetThreadIOPendingFlag
TransmitCommChar
GetComputerNameA
GetDiskFreeSpaceA
LocalShrink
VirtualAlloc
ReadConsoleInputA
FindFirstChangeNotificationA
ReadConsoleOutputCharacterA
dpnet
DirectPlay8Create
advapi32
CredFree
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 380KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 441KB - Virtual size: 711KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 374KB - Virtual size: 373KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ