Static task
static1
Behavioral task
behavioral1
Sample
b98a5c0730bb87b27c495a87876d10acb6fa8fc62d67913f22313e88b0277dda.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b98a5c0730bb87b27c495a87876d10acb6fa8fc62d67913f22313e88b0277dda.exe
Resource
win10v2004-20220812-en
General
-
Target
b98a5c0730bb87b27c495a87876d10acb6fa8fc62d67913f22313e88b0277dda
-
Size
414KB
-
MD5
e694f2bb3a64fbbe752f2f74c3518802
-
SHA1
543a0fe1ccef976c728e64e337684487024bb5e4
-
SHA256
b98a5c0730bb87b27c495a87876d10acb6fa8fc62d67913f22313e88b0277dda
-
SHA512
8faebd49714c3ec7dd04f9815b522c3f6ceb20a6165803fc721e478d123cbebb3323be60a74ca68c0ce04f1acb911501f32cb9f03cd42b1db5a4d0fd7bf59b95
-
SSDEEP
12288:sK1EVbounkPU7vdqvL+P2+qr1I3LZLZQT:snFnMU4vL+M5CZLZQT
Malware Config
Signatures
Files
-
b98a5c0730bb87b27c495a87876d10acb6fa8fc62d67913f22313e88b0277dda.exe windows x86
2004fb7f95f13d0f90b02df4b560cdc8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLCID
VirtualAlloc
CloseHandle
Sleep
GetThreadPriority
GetProfileStringW
FindAtomW
SetUnhandledExceptionFilter
ChangeTimerQueueTimer
GetAtomNameA
GetSystemDefaultUILanguage
ord1
GetVersionExW
SetCommState
ExitProcess
_lclose
CreateEventW
GetTempPathA
msrepl40
ord2001
ord2042
ord2024
ord2041
rtutils
TraceDeregisterW
RouterLogEventStringA
TraceRegisterExA
RouterLogEventExW
LogEventW
TraceDumpExA
RouterLogEventDataA
RouterLogDeregisterW
LogEventA
TracePutsExA
RouterLogEventStringW
RouterLogRegisterA
LogErrorA
TracePrintfA
TraceDeregisterExA
TracePrintfExW
RouterLogDeregisterA
RouterLogEventW
TraceRegisterExW
LogErrorW
msvbvm60
__vbaForEachCollVar
ord690
_adj_fdiv_m32
__vbaVarDup
__vbaAptOffset
ord304
__vbaChkstk
ord520
_CItan
_allmul
ord709
__vbaGosubFree
_adj_fdiv_m32i
__vbaFreeStrList
ord647
__vbaForEachCollObj
__vbaFpR8
ord102
__vbaFileOpen
ord711
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CRT Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.textbs Size: 381KB - Virtual size: 477KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ