Static task
static1
Behavioral task
behavioral1
Sample
99fc54786a72f32fd44c7391c2171ca31e72ca52725c68e2dde94d04c286fccd.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
99fc54786a72f32fd44c7391c2171ca31e72ca52725c68e2dde94d04c286fccd.exe
Resource
win10v2004-20220715-en
General
-
Target
99fc54786a72f32fd44c7391c2171ca31e72ca52725c68e2dde94d04c286fccd.bin
-
Size
1.4MB
-
MD5
54ca404d16db18d233c606b48c73d66f
-
SHA1
d7d472bfc62bd6f52e3b4b3c7e88b92b664dd142
-
SHA256
99fc54786a72f32fd44c7391c2171ca31e72ca52725c68e2dde94d04c286fccd
-
SHA512
7e050f69257338bbb129b64671055d68e4232404f440c19157553eb9ddf103ec17f1053438d6692f29e921ca9e384ced684b4f89c0756ef9b414978aefdb5941
-
SSDEEP
24576:RtpRWh9e6yT5p0qMBNEYhw+fEh9vnwR76aNGu:Rch9JqMBNZNMh962c
Malware Config
Signatures
Files
-
99fc54786a72f32fd44c7391c2171ca31e72ca52725c68e2dde94d04c286fccd.bin.exe windows x86
e35d8b44296d67eb10cc5ca04f16565a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
FormatMessageA
GetACP
GetOEMCP
QueryPerformanceCounter
GetSystemTime
GetLocalTime
FileTimeToSystemTime
SetFilePointer
GetCurrentThreadId
LoadLibraryW
SetEndOfFile
SetLastError
WaitForSingleObject
WriteConsoleW
SetEnvironmentVariableA
SetFileAttributesW
GetFullPathNameW
GetFileAttributesW
FindClose
CreateFileW
CreateDirectoryW
GetCurrentDirectoryW
GetCurrentDirectoryA
GetLastError
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetComputerNameA
CreateProcessA
GetCurrentProcess
Sleep
CloseHandle
WriteFile
ReadFile
CreateFileA
GetFileSize
SystemTimeToFileTime
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
GetFileAttributesExW
GetExitCodeProcess
OutputDebugStringW
LCMapStringW
CompareStringW
ReadConsoleW
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
SetStdHandle
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
GetFileType
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
FindFirstFileExW
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
RaiseException
RtlUnwind
GetCommandLineW
IsDebuggerPresent
IsProcessorFeaturePresent
HeapReAlloc
GetTimeZoneInformation
GetProcessHeap
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetStdHandle
LoadLibraryExW
IsValidCodePage
GetCPInfo
user32
MessageBoxA
advapi32
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
GetTokenInformation
OpenProcessToken
ws2_32
WSACleanup
WSAStartup
socket
send
recv
inet_addr
htons
connect
closesocket
Sections
.text Size: 791KB - Virtual size: 790KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 501KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ