Static task
static1
Behavioral task
behavioral1
Sample
98106ada16435862d6c8bd5117d329641b1091672048ec30e292bca1ab9b4c16.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
98106ada16435862d6c8bd5117d329641b1091672048ec30e292bca1ab9b4c16.exe
Resource
win10v2004-20220812-en
General
-
Target
98106ada16435862d6c8bd5117d329641b1091672048ec30e292bca1ab9b4c16
-
Size
800KB
-
MD5
2591843ba752fb848814ce33728489a0
-
SHA1
e41764593bfde96812a3ca2430401c51cef289fc
-
SHA256
98106ada16435862d6c8bd5117d329641b1091672048ec30e292bca1ab9b4c16
-
SHA512
84ee6603414352745f2ae6a976f88700fc83c105b93d88dcf3fbb36d8080911287d6ca3b3c6e4c4702786f071ad97f1759a25af151edd82672020844cd399fa7
-
SSDEEP
12288:7S+b+WQ6BvOVDZ50LJ4R+hYPa11zcy3dWyerNYL4Y/sAod3zhpQe5D:O6+d6YVaJ47GzhNWOEAY3lpQ
Malware Config
Signatures
Files
-
98106ada16435862d6c8bd5117d329641b1091672048ec30e292bca1ab9b4c16.exe windows x86
9c732a28eaff0a178ccd00c7b15c39ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetFileTime
lstrcpyA
SetFileTime
LoadLibraryW
IsBadWritePtr
CloseHandle
GetExitCodeProcess
FormatMessageW
CreateMutexW
GetModuleHandleA
ReadFile
lstrcatA
GetLastError
FindResourceW
SetFileTime
LeaveCriticalSection
GetStartupInfoW
InitializeCriticalSection
CreatePipe
GetFileSize
HeapCreate
msi
MsiCollectUserInfoA
MsiDatabaseCommit
MsiAdvertiseProductW
MsiConfigureFeatureA
user32
wsprintfA
PeekMessageW
GetWindowRect
DispatchMessageA
SetFocus
PostMessageW
GetWindowTextA
PostMessageA
LoadCursorW
IsWindow
IsDialogMessageA
MessageBoxA
GetWindowLongW
clbcatq
SetSetupSave
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 786KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ole Size: 512B - Virtual size: 129B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE