Static task
static1
Behavioral task
behavioral1
Sample
98bb7c5ff6d1d170f20b53c5f0e9059923e781c61228b82bd5db99d0c2b2a876.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
98bb7c5ff6d1d170f20b53c5f0e9059923e781c61228b82bd5db99d0c2b2a876.exe
Resource
win10v2004-20220812-en
General
-
Target
98bb7c5ff6d1d170f20b53c5f0e9059923e781c61228b82bd5db99d0c2b2a876
-
Size
114KB
-
MD5
b31e59169f017af7ad850ea951dd897d
-
SHA1
3f1e4e5caa8998b35b6924a0a47a8b3e3948e732
-
SHA256
98bb7c5ff6d1d170f20b53c5f0e9059923e781c61228b82bd5db99d0c2b2a876
-
SHA512
1bfc5abb09f524c7e808a56bac5f8190229327fff5a6190aa450e734ac30f7807f7925d4b3be074d55449d6ab1ce4f00dfa071e9a47136ba6e32c18f4e4bc5d9
-
SSDEEP
3072:W3snpj1ZeVUDfKvzljLkix6+O2Gp+syxUH5I:W3spj1gUDyvzSZ+tegme
Malware Config
Signatures
Files
-
98bb7c5ff6d1d170f20b53c5f0e9059923e781c61228b82bd5db99d0c2b2a876.exe windows x86
d560cf760c74b2b21d4a506e6cd6e0c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
Beep
CommConfigDialogA
CreateMailslotA
EraseTape
ExitProcess
FindAtomA
GetAtomNameA
GetCPInfoExA
GetCommModemStatus
GetCommandLineA
GetConsoleOutputCP
GetCurrentThread
GetDiskFreeSpaceExA
GetDriveTypeA
GetModuleHandleA
GetProcAddress
GetProfileIntA
GetProfileStringA
GetStartupInfoA
GetVersion
GetWindowsDirectoryA
GlobalAlloc
GlobalReAlloc
IsBadCodePtr
IsBadWritePtr
LockFile
PeekConsoleInputA
QueryDosDeviceA
ResetEvent
SearchPathA
SetUnhandledExceptionFilter
UnlockFile
VirtualFree
VirtualLock
WaitForMultipleObjectsEx
WriteProfileStringA
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fputc
free
malloc
memset
rand
signal
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE