Static task
static1
Behavioral task
behavioral1
Sample
198528b928b2b7756006743717849060fc5834c8083ebf01997829d717c4bf79.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
198528b928b2b7756006743717849060fc5834c8083ebf01997829d717c4bf79.exe
Resource
win10v2004-20220901-en
General
-
Target
198528b928b2b7756006743717849060fc5834c8083ebf01997829d717c4bf79
-
Size
96KB
-
MD5
50203ebced4420b5d9ef53fd09541050
-
SHA1
ec4d61979e226978fb84686821bdf4f394ea6a79
-
SHA256
198528b928b2b7756006743717849060fc5834c8083ebf01997829d717c4bf79
-
SHA512
61b2d6e01f95a184eedfdd88ddbeabe52083028cb2b6d958ad93b288b63f9cba54058523bc2baa3e369ac6b6796c9b78ae916a562728609eb3eba55150f0f99c
-
SSDEEP
1536:2jNFkHqPUeDEoCyGpEUOIeYYJl03R8YN4weVXjmoQg4DQjM5:IksUeDEoCbOIVCWt4xmoeT5
Malware Config
Signatures
Files
-
198528b928b2b7756006743717849060fc5834c8083ebf01997829d717c4bf79.exe windows x86
b3c05b9c726b195d50e4e3776bf0e916
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
VirtualAlloc
GetProcAddress
GetStartupInfoA
GetVersionExA
GetVersion
GetDefaultCommConfigA
GetModuleHandleA
LoadLibraryA
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
HeapReAlloc
HeapAlloc
GetOEMCP
WriteFile
GetCommandLineA
VirtualFree
ExitProcess
GetACP
GetCPInfo
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
LCMapStringW
user32
GetSystemMetrics
RegisterClassExA
advapi32
RegCloseKey
Sections
.text Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ