Static task
static1
Behavioral task
behavioral1
Sample
f99bc0be4a1c63cbd06ad56e5a02e163a0aaced4dc00e88986363924ba0149c9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f99bc0be4a1c63cbd06ad56e5a02e163a0aaced4dc00e88986363924ba0149c9.exe
Resource
win10v2004-20220812-en
General
-
Target
f99bc0be4a1c63cbd06ad56e5a02e163a0aaced4dc00e88986363924ba0149c9
-
Size
208KB
-
MD5
653481b6d3e09c176737659a541cd338
-
SHA1
ec10bc51dc6cf6dd3afdd739b64c345642826e3c
-
SHA256
f99bc0be4a1c63cbd06ad56e5a02e163a0aaced4dc00e88986363924ba0149c9
-
SHA512
c591d7674dfd81590025a0bb70c20d28f1f02c24cb073749639f16414b9b712511bafe6bbb3ac318bd87604b4e53160d83bfd0838878aeeb8e5cc8d621475fb1
-
SSDEEP
6144:74o4MfKW8KwqlsEnLv5Zbevoc1yq2Y9TFl/z+X:0JMfKKw5ELvv24MFk
Malware Config
Signatures
Files
-
f99bc0be4a1c63cbd06ad56e5a02e163a0aaced4dc00e88986363924ba0149c9.exe windows x86
2b9ac87d5d2c63c781604bed9c380e3a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
scecli
SceAddToNameStatusList
SceAnalyzeSystem
SceBrowseDatabaseTable
SceAddToObjectList
SceCloseProfile
SceAppendSecurityProfileInfo
kernel32
HeapFree
GetVolumeInformationA
LoadLibraryW
GetCurrentProcess
WideCharToMultiByte
lstrcmpA
MultiByteToWideChar
GetProcessHeap
GetTickCount
GetLocaleInfoA
IsValidLocale
CreateFileA
SetUnhandledExceptionFilter
lstrcpyA
QueryPerformanceCounter
HeapAlloc
GetOEMCP
lstrlenA
GetCurrentProcessId
CloseHandle
GetSystemTimeAsFileTime
FindResourceA
SystemTimeToFileTime
LockResource
SetLastError
GetLocalTime
schannel
QuerySecurityPackageInfoW
InitializeSecurityContextW
QueryContextAttributesW
QueryContextAttributesA
QuerySecurityPackageInfoA
advapi32
RegCloseKey
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
Sections
.text Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ