Static task
static1
Behavioral task
behavioral1
Sample
98b5ec5288485103173b20874829cc28681b40edce72080befb3d71fcb89e13a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
98b5ec5288485103173b20874829cc28681b40edce72080befb3d71fcb89e13a.exe
Resource
win10v2004-20220812-en
General
-
Target
98b5ec5288485103173b20874829cc28681b40edce72080befb3d71fcb89e13a
-
Size
18KB
-
MD5
4e87149a215ef9a27adde47bcf887f12
-
SHA1
28f8bac518af95c50f9b718c11eb6c6549184e05
-
SHA256
98b5ec5288485103173b20874829cc28681b40edce72080befb3d71fcb89e13a
-
SHA512
d46febaec14f32a2c7469dc322b6b5027ad68de09d6549b8988cfdbd8243aab788d0af7a0c6eeecb880718497485fd333295e84c6937c3a403faccd051dd4c2d
-
SSDEEP
384:4tGi0L3Pn4SsalqSl7gtj5duZbj84HAqT87JkEljN0Z:4tXaQulflcz8w4g+8C7Z
Malware Config
Signatures
Files
-
98b5ec5288485103173b20874829cc28681b40edce72080befb3d71fcb89e13a.exe windows x86
1c97bc4fee93d60ed0429a595426ad93
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
kernel32
lstrcpynA
UnhandledExceptionFilter
GetSystemTime
lstrcatA
LeaveCriticalSection
GetCurrentProcess
InitializeCriticalSection
GetSystemTimeAsFileTime
SystemTimeToFileTime
FormatMessageA
GetLocalTime
CreateFileA
OpenProcess
EnterCriticalSection
IsDebuggerPresent
lstrlenA
GetLastError
GetEnvironmentStrings
LoadLibraryExA
TerminateProcess
lstrcmpA
FileTimeToSystemTime
FreeLibrary
FileTimeToLocalFileTime
SetUnhandledExceptionFilter
DeleteCriticalSection
GetFullPathNameA
lstrcmpW
CloseHandle
GetTimeZoneInformation
FreeEnvironmentStringsA
GetTickCount
LoadLibraryA
GetFileSize
ExitProcess
LocalFree
ReadFile
VirtualAlloc
GetModuleHandleA
user32
MessageBoxA
wsprintfA
SetTimer
GetDlgItem
KillTimer
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ