Static task
static1
Behavioral task
behavioral1
Sample
898d355158a64ab73ee1b344328d1ef7128ab91834c49c47108078d1b6540a02.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
898d355158a64ab73ee1b344328d1ef7128ab91834c49c47108078d1b6540a02.exe
Resource
win10v2004-20220812-en
General
-
Target
898d355158a64ab73ee1b344328d1ef7128ab91834c49c47108078d1b6540a02
-
Size
2.5MB
-
MD5
f6aa627d28f237d502ae109e5f9a14ed
-
SHA1
c57339f10e12e079153c26754891102a7b4f8ded
-
SHA256
898d355158a64ab73ee1b344328d1ef7128ab91834c49c47108078d1b6540a02
-
SHA512
8d35a0e07dfd987a3a45581b0b9522feaaa492a9332dca9b53b59b8bb3229b0452d442cfb6e23d638ad719ff2153ce8bf9bf31c693bd83033f8fe59bc9a09c73
-
SSDEEP
49152:HF9ICJObXz0hi5e745KuV/IbytG3JYyaa1msNrlK0:lK3TAhiFJIbyEJ/npL
Malware Config
Signatures
Files
-
898d355158a64ab73ee1b344328d1ef7128ab91834c49c47108078d1b6540a02.exe windows x86
175369224eb3be6fb350fddfaa3ff3fa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
mpr
WNetGetConnectionA
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
IsEqualGUID
comctl32
ImageList_SetIconSize
winspool.drv
OpenPrinterA
shell32
Shell_NotifyIconA
wininet
InternetReadFile
comdlg32
PageSetupDlgA
wsock32
send
pquery.bin
WyQueryPYWhole
msvcrt
_gcvt
lz32
LZOpenFileA
Sections
CODE Size: 2.4MB - Virtual size: 9.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE