Static task
static1
Behavioral task
behavioral1
Sample
f99a5b197c4a26b73d36d3b02e2b29b069c417487de803e17ec172834799939d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f99a5b197c4a26b73d36d3b02e2b29b069c417487de803e17ec172834799939d.exe
Resource
win10v2004-20220812-en
General
-
Target
f99a5b197c4a26b73d36d3b02e2b29b069c417487de803e17ec172834799939d
-
Size
443KB
-
MD5
688118b4e05b3da489cdbb9688abf5ec
-
SHA1
990c070fabbdf89d72cbccdf2b41823228a95964
-
SHA256
f99a5b197c4a26b73d36d3b02e2b29b069c417487de803e17ec172834799939d
-
SHA512
b7a5f834b13e9db3b31bdec94cc412808dbef9cc9df60450bcf727dc08210bda3a80be9a53ef18e507cd0786cffa6ca6aeac880b5dff26afa9ded9f31f07f1f5
-
SSDEEP
6144:DkSJZhUMufgvnKBJlv9TB5dqBa0n26wXs9U+I5xm8UU:IcUMufunKNv9TvVossSUQ
Malware Config
Signatures
Files
-
f99a5b197c4a26b73d36d3b02e2b29b069c417487de803e17ec172834799939d.exe windows x86
c182a719158a6d4c6d6831ad11830c96
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
FlushFileBuffers
SetEndOfFile
CloseHandle
GetSystemTimeAsFileTime
ExpandEnvironmentStringsA
OutputDebugStringA
CreateDirectoryA
GetFileAttributesA
GetProcAddress
GetVersion
GetCurrentProcess
GetModuleHandleA
GetVersionExA
ReleaseMutex
WaitForSingleObject
CreateMutexA
OpenMutexA
LocalFree
SetLastError
LocalAlloc
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
FreeLibrary
GlobalAlloc
GlobalLock
GlobalUnlock
FlushInstructionCache
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
MulDiv
lstrcmpA
lstrcmpiA
LoadLibraryExA
GetModuleFileNameA
FindResourceA
RemoveDirectoryA
IsDBCSLeadByte
TerminateProcess
Sleep
WriteFile
GetLocaleInfoW
LCMapStringW
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetCommandLineA
AreFileApisANSI
VirtualQuery
VirtualProtect
GetSystemInfo
IsDebuggerPresent
GetLocalTime
RtlUnwind
GetStringTypeW
EncodePointer
DecodePointer
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
InterlockedCompareExchange
GetProcessHeap
GetModuleHandleExW
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
IsValidCodePage
GetACP
GetOEMCP
GetConsoleCP
GetConsoleMode
GetFileType
DeleteFileW
MoveFileExW
GetLastError
GetCurrentThreadId
GetCurrentProcessId
WideCharToMultiByte
FindResourceExW
FindResourceW
SizeofResource
LoadResource
LockResource
FreeEnvironmentStringsW
GetEnvironmentStringsW
OutputDebugStringW
LoadLibraryExW
LoadLibraryW
SetFilePointerEx
SetStdHandle
WriteConsoleW
CreateFileW
ReadConsoleW
ExitProcess
GetModuleFileNameW
IsValidLocale
GetStdHandle
GetUserDefaultLCID
QueryPerformanceCounter
EnumSystemLocalesW
user32
FindWindowExA
LoadCursorA
GetWindow
GetClassNameA
GetParent
GetDesktopWindow
GetWindowLongA
FillRect
GetSysColor
ScreenToClient
ClientToScreen
GetClientRect
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
RedrawWindow
InvalidateRgn
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
DestroyAcceleratorTable
CreateAcceleratorTableA
ReleaseCapture
SetCapture
GetFocus
SetFocus
CharNextA
GetDlgItem
SetWindowPos
MoveWindow
DestroyWindow
IsChild
IsWindow
CreateWindowExA
GetClassInfoExA
RegisterClassExA
CallWindowProcA
DefWindowProcA
SendMessageA
RegisterWindowMessageA
UnregisterClassA
SetWindowLongA
gdi32
GetStockObject
GetDeviceCaps
DeleteObject
SelectObject
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteDC
GetObjectA
advapi32
RegSetValueExA
RegQueryInfoKeyW
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
OpenProcessToken
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
SHGetFolderPathA
SHFileOperationA
ole32
CoUninitialize
CoInitialize
CoGetClassObject
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
OleInitialize
OleUninitialize
CreateStreamOnHGlobal
OleLockRunning
oleaut32
SysStringLen
VariantInit
VariantClear
VarUI4FromStr
LoadTypeLi
SysAllocString
OleCreateFontIndirect
SysAllocStringLen
LoadRegTypeLi
SysFreeString
comctl32
InitCommonControlsEx
Sections
.text Size: 248KB - Virtual size: 247KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE