Static task
static1
Behavioral task
behavioral1
Sample
99daccdbd93898f45b46fab80deb36d1.exe
Resource
win7-20220718-en
General
-
Target
99daccdbd93898f45b46fab80deb36d1
-
Size
290KB
-
MD5
99daccdbd93898f45b46fab80deb36d1
-
SHA1
5655140798dc860bf15025c637dcf099676eb01e
-
SHA256
bdcadee0628bf579384c90300ab1d20f043f7222a3fb45b3220187c79a82ef5e
-
SHA512
bd5e39fafe523c2b24582749c03dc16279819e68e2a4f0473be5c0fbbcb2b8093c99b3e18a8a791d0e503c7b355097e4b1653db4d6b8ca492579664d849618a9
-
SSDEEP
6144:7lvq1xaRTK9xVbXWmO67NvGoetZBSN7qr+:xigM9/bXWyNe7BSN2r
Malware Config
Signatures
Files
-
99daccdbd93898f45b46fab80deb36d1.exe windows x86
edbc0ab7cd4dbac50053e7506fec7f5e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FillConsoleOutputCharacterW
LocalSize
WriteConsoleInputA
EnumDateFormatsA
FindNextFileA
CopyFileExA
DnsHostnameToComputerNameA
VerifyVersionInfoA
VirtualLock
SetVolumeLabelW
LockFile
GetProfileSectionW
RequestWakeupLatency
GetProcessPriorityBoost
GlobalGetAtomNameW
DeleteFileA
FindNextVolumeMountPointA
TlsSetValue
LoadResource
GetConsoleTitleA
GetComputerNameExW
OpenEventW
GetModuleHandleA
GetSystemDirectoryW
GetDriveTypeA
BuildCommDCBAndTimeoutsW
GetShortPathNameW
ReleaseActCtx
GetCommandLineW
InterlockedExchange
CopyFileW
CreateActCtxW
FormatMessageW
EnterCriticalSection
FindNextVolumeA
GetExitCodeThread
LoadLibraryA
CreateNamedPipeA
GetSystemDefaultLCID
GetConsoleAliasesLengthW
WriteProfileSectionA
AddAtomW
InterlockedDecrement
VerifyVersionInfoW
HeapFree
_hread
InterlockedExchangeAdd
GetStartupInfoA
CreateMailslotW
GetCPInfoExA
GetSystemWow64DirectoryW
GetPrivateProfileIntA
GetConsoleAliasExesLengthW
WaitForDebugEvent
EndUpdateResourceA
SetLastError
ExitThread
GetACP
GetDiskFreeSpaceExW
DefineDosDeviceW
TerminateProcess
EnumResourceLanguagesW
GetCPInfoExW
SetConsoleTextAttribute
IsProcessInJob
CreateIoCompletionPort
WriteConsoleA
GetProcAddress
lstrcatA
ReadConsoleOutputA
SetCriticalSectionSpinCount
GetComputerNameW
EnumSystemLocalesA
WritePrivateProfileSectionA
WritePrivateProfileStructW
GetPrivateProfileSectionNamesW
FileTimeToSystemTime
GetComputerNameExA
GlobalMemoryStatus
SetTapeParameters
lstrcmpW
SetEvent
MoveFileA
FreeLibrary
GetCommState
InterlockedCompareExchange
GetConsoleFontSize
GetOverlappedResult
LocalAlloc
SetThreadPriorityBoost
SetFileShortNameW
lstrcpyA
HeapQueryInformation
GetFileAttributesA
SetCalendarInfoA
GetConsoleTitleW
SetComputerNameW
GetConsoleAliasesA
EnumDateFormatsExW
GetTimeZoneInformation
GetConsoleOutputCP
GetStdHandle
GetLocalTime
GetStringTypeW
FindActCtxSectionStringA
FreeEnvironmentStringsA
GetModuleHandleExW
LoadLibraryW
GetBinaryTypeA
DeleteFiber
GetSystemWindowsDirectoryA
SetFileTime
GetFileType
GetNamedPipeHandleStateA
UnhandledExceptionFilter
GetProcessShutdownParameters
lstrcpynA
GlobalWire
FillConsoleOutputCharacterA
GetCompressedFileSizeA
GetFullPathNameA
ReadConsoleW
FreeUserPhysicalPages
WriteConsoleOutputCharacterW
OpenJobObjectA
CreateFileW
DeleteTimerQueueTimer
FlushFileBuffers
lstrcpynW
GetNamedPipeHandleStateW
RaiseException
GetCommandLineA
HeapValidate
IsBadReadPtr
DeleteCriticalSection
LeaveCriticalSection
GetModuleFileNameW
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedIncrement
GetOEMCP
GetCPInfo
IsValidCodePage
TlsGetValue
GetModuleHandleW
TlsAlloc
GetCurrentThreadId
TlsFree
GetLastError
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
ExitProcess
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
RtlUnwind
InitializeCriticalSectionAndSpinCount
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
MultiByteToWideChar
GetStringTypeA
LCMapStringA
LCMapStringW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
CreateFileA
CloseHandle
user32
LoadMenuW
CharUpperW
gdi32
SelectObject
winhttp
WinHttpQueryOption
Sections
.text Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 71KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ