Static task
static1
Behavioral task
behavioral1
Sample
c98243425e7817777045a45a5f0fdc0d39e86391a91f224cae5966bbe6078299.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c98243425e7817777045a45a5f0fdc0d39e86391a91f224cae5966bbe6078299.exe
Resource
win10v2004-20220812-en
General
-
Target
c98243425e7817777045a45a5f0fdc0d39e86391a91f224cae5966bbe6078299
-
Size
321KB
-
MD5
594f370699efd32f9f47d4023f4db53f
-
SHA1
79f7a48e16345c3e262d3ed3d6b07819a3921042
-
SHA256
c98243425e7817777045a45a5f0fdc0d39e86391a91f224cae5966bbe6078299
-
SHA512
5adc5f3a73d9f8a85dc03b8380cdcc3b57202566f6811457f65f9b644b15c81c2ea262c618f5cfa2da0d987c03a37e358eb03e53773b001cf852c771f4544330
-
SSDEEP
6144:rcwuO3NYDsNAdnQWMAN6l5yjiqXRZtWpfvxs5kiha0Al3EsRy2LaQtw:rc7O3N50BMukyHgG51A5WQy
Malware Config
Signatures
Files
-
c98243425e7817777045a45a5f0fdc0d39e86391a91f224cae5966bbe6078299.exe windows x86
08a2d2ae5ed011f7b011b31f9277e748
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GlobalUnlock
SetErrorMode
LockResource
GetLocaleInfoA
GetACP
LoadLibraryExA
HeapCreate
FoldStringA
GlobalDeleteAtom
CloseHandle
Sleep
InterlockedExchange
VirtualProtect
GetLastError
GetStdHandle
RaiseException
EnterCriticalSection
GetDriveTypeA
SetConsoleCP
GlobalAddAtomA
user32
ReleaseDC
GetActiveWindow
GetClassNameA
ValidateRect
ShowWindow
SetForegroundWindow
ClipCursor
DrawTextA
GetCursorPos
DrawEdge
GetMenuItemInfoA
IsIconic
BeginPaint
GetWindow
GetFocus
CharToOemA
GetParent
GetWindowTextA
EndPaint
version
GetFileVersionInfoSizeA
VerFindFileA
VerQueryValueA
VerLanguageNameA
GetFileVersionInfoA
rasadhlp
WSAttemptAutodialName
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ