Static task
static1
Behavioral task
behavioral1
Sample
998552fa64100babdc2d9d2b96f51807b748b1e58592bf37e78c454fccbab386.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
998552fa64100babdc2d9d2b96f51807b748b1e58592bf37e78c454fccbab386.exe
Resource
win10v2004-20220812-en
General
-
Target
998552fa64100babdc2d9d2b96f51807b748b1e58592bf37e78c454fccbab386
-
Size
368KB
-
MD5
5cae8d376ec55eebb37b5e5c67cdc231
-
SHA1
423bf2afb2596e86587f58a1132c2631b852036b
-
SHA256
998552fa64100babdc2d9d2b96f51807b748b1e58592bf37e78c454fccbab386
-
SHA512
737e1c09a7cf4217e88988a6767a16ddce820ef2497acdd0d8292f5ae68a155537f2833b2c7e0415acad8a608379bc9b68fe092d7feabcf818bda245138bb68f
-
SSDEEP
6144:EmUsxnVs3zjKFYUKGYyrBKcHnjYfIHTn1rrQzWmtXhzpJP/yDfMvCecDjd7mUOV:EmZ6GMWTHnnzn1rrQ5tTIJp7mf
Malware Config
Signatures
Files
-
998552fa64100babdc2d9d2b96f51807b748b1e58592bf37e78c454fccbab386.exe windows x86
a5b534f9f2faea27c4308210c951fb23
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
CreateThread
GetModuleHandleW
GetDriveTypeW
VirtualAlloc
ResumeThread
WriteFile
GetPrivateProfileIntW
GetEnvironmentVariableA
FindVolumeClose
GetExitCodeProcess
InterlockedExchange
GlobalFree
ResetEvent
CloseHandle
FreeConsole
GetMailslotInfo
lstrlenA
LocalSize
LocalFree
user32
GetCursorInfo
DrawStateW
IsWindow
GetClassInfoA
CallWindowProcW
CreateWindowExA
GetSysColor
GetKeyboardType
EndDialog
GetClientRect
SetFocus
DispatchMessageA
GetSysColor
qedit
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllGetClassObject
hdwwiz.cpl
InstallNewDevice
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 358KB - Virtual size: 358KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ