Static task
static1
Behavioral task
behavioral1
Sample
98e771b1f9e335643ac95727c9e4a815ba590dee84249908a2beb835a9406d3e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
98e771b1f9e335643ac95727c9e4a815ba590dee84249908a2beb835a9406d3e.exe
Resource
win10v2004-20221111-en
General
-
Target
98e771b1f9e335643ac95727c9e4a815ba590dee84249908a2beb835a9406d3e
-
Size
823KB
-
MD5
49bf742fd66b264fd5e4705eaee3fcf4
-
SHA1
cdb4ac7ca83c8ff24850f303f78f8ece09a6a025
-
SHA256
98e771b1f9e335643ac95727c9e4a815ba590dee84249908a2beb835a9406d3e
-
SHA512
2405cc46ccf25eecca3d1ada20f36e4fbed3d99863585e0a81babaf3f5a95998b35eeae69f03ef2ffee98dcb9abac7dfe8eedc84a4383e7562fcab6144fd42c9
-
SSDEEP
12288:w5IcMkZun0ynynyfRQ5kUxBb4Re9/xcsYT2DTM3MSK7yZ5:YI2un066l5ja49/KPTSTM3MSK7c
Malware Config
Signatures
Files
-
98e771b1f9e335643ac95727c9e4a815ba590dee84249908a2beb835a9406d3e.exe windows x86
5949f4ae8f77274f7b7604c1f5149821
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueA
RegCloseKey
kernel32
VirtualAlloc
HeapAlloc
GetProcessHeap
CreateFileA
GetFileType
GetFileAttributesA
GetFileSize
FindFirstFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
HeapFree
GetProcAddress
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
IsBadWritePtr
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetConsoleCtrlHandler
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
Sleep
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
user32
GetParent
GetTitleBarInfo
IsIconic
AllowSetForegroundWindow
IsWindowVisible
GetWindowRect
IsWindowUnicode
ShowWindowAsync
CloseWindow
GetClientRect
GetWindowInfo
RegisterClassA
CreateWindowExA
DefWindowProcA
PostQuitMessage
opengl32
glRasterPos3s
glNormal3d
glColor3i
glColor3f
glColor4us
glRasterPos4s
glColor4s
glIndexub
glRasterPos2fv
glColor4fv
glEvalMesh1
glColor3dv
glColor3sv
glRasterPos3fv
glMapGrid1f
glEvalCoord2f
glEvalCoord1f
glEvalPoint1
glRasterPos2iv
glRasterPos4fv
glColor3s
glColor3fv
glIndexs
glEvalCoord1dv
glEvalCoord2fv
glColor3ubv
glColor4i
glIndexfv
glIndexf
glEvalCoord1d
glNormal3s
glRasterPos4f
glNormal3fv
glRasterPos3f
glColor4usv
glIndexdv
glNormal3dv
glRasterPos4d
glRasterPos3i
glEvalCoord2dv
glRasterPos2s
glInitNames
glColor4ub
glRasterPos3sv
glEvalMesh2
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 708KB - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ