Static task
static1
Behavioral task
behavioral1
Sample
98954e348edce62da409fb0d73e6901547ad7d1ca148d28720bc0bfb24ba8a4a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
98954e348edce62da409fb0d73e6901547ad7d1ca148d28720bc0bfb24ba8a4a.exe
Resource
win10v2004-20221111-en
General
-
Target
98954e348edce62da409fb0d73e6901547ad7d1ca148d28720bc0bfb24ba8a4a
-
Size
170KB
-
MD5
cad22a24c0efc198a9e49322e8717d1b
-
SHA1
180dad1375200cde30361d3deaea8d500dab7e2b
-
SHA256
98954e348edce62da409fb0d73e6901547ad7d1ca148d28720bc0bfb24ba8a4a
-
SHA512
cd1fd5ee73097f6148c721e4b97616dcb13d92a6de2f0c363efc3babc684e97ad51543d63a1587dbf947a2fe657c7b168a9e1409d97c7e6598b059ec1a5681db
-
SSDEEP
3072:Go7MkgUuHGdVP9AvTXdzLKzZDGR5AufhiEqveCTP9rlbqvY1YMic0ARs:GagUzVP6rNX+ZAQEqjbEY2L1
Malware Config
Signatures
Files
-
98954e348edce62da409fb0d73e6901547ad7d1ca148d28720bc0bfb24ba8a4a.exe windows x86
cc92a37aed271ad6629eee3033189775
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadPriority
InterlockedExchange
VirtualProtect
GetExpandedNameA
HeapCreate
GetCurrentProcess
GetCurrentThread
GetModuleHandleA
GetEnvironmentStringsA
GetCurrentProcessId
GetACP
LoadLibraryA
FormatMessageA
FlushFileBuffers
OpenSemaphoreA
IsDebuggerPresent
GetTimeFormatA
WriteConsoleA
GetStdHandle
HeapDestroy
DeleteAtom
user32
wsprintfA
GetDlgItem
DrawTextA
GetClassNameA
GetWindowTextLengthA
SetActiveWindow
ShowWindow
GetCursorPos
FrameRect
ReleaseDC
EndPaint
GetParent
IsIconic
SetForegroundWindow
ValidateRgn
GetFocus
FillRect
GetWindow
BeginPaint
advapi32
RegCreateKeyA
RegCloseKey
RegQueryInfoKeyA
RegEnumKeyA
RegFlushKey
uxtheme
GetThemeSysFont
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ