Static task
static1
Behavioral task
behavioral1
Sample
99c625a3fcac1f52774910dbcd7e1d5aec9494bd1884eaf9a0e26beefc7f8413.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
99c625a3fcac1f52774910dbcd7e1d5aec9494bd1884eaf9a0e26beefc7f8413.exe
Resource
win10v2004-20220901-en
General
-
Target
99c625a3fcac1f52774910dbcd7e1d5aec9494bd1884eaf9a0e26beefc7f8413
-
Size
79KB
-
MD5
63bea1d51b6cc1daa132f46bea0e35f0
-
SHA1
ea06d522436ccffc2686f06c23cd8277f8d914a9
-
SHA256
99c625a3fcac1f52774910dbcd7e1d5aec9494bd1884eaf9a0e26beefc7f8413
-
SHA512
5ad1700a9a94de8a6f052b833f587d0cba098901134b0d25a44eb454057acd9707037680d9ee998254ce21343c5b9baf0f6c4638ab36d3f8f1dabe2d10256ca5
-
SSDEEP
1536:M+3Le8Ijge2LKEivuGWh3I5iLMfOuvHWGfY0z/Tdm+3UphL:M+be8IjfNWh45iLMWuv2KRbdm+3+
Malware Config
Signatures
Files
-
99c625a3fcac1f52774910dbcd7e1d5aec9494bd1884eaf9a0e26beefc7f8413.exe windows x86
a00d4ea0a0ed44665938b1e0a9771930
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileAttributesExA
SetFileAttributesA
CloseHandle
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
Sleep
CreateFileA
GetVersion
GetProcAddress
GetModuleHandleW
GetLastError
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
RtlUnwind
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
GetModuleFileNameA
GetDriveTypeA
UnhandledExceptionFilter
user32
CharNextExA
DispatchMessageA
PeekMessageA
SendDlgItemMessageA
EnableMenuItem
GetSystemMenu
CreateDialogParamA
DestroyWindow
MessageBoxA
msvcrt
_errno
_mkdir
_write
_read
_eof
_tempnam
strpbrk
strspn
memcpy
atoi
isdigit
_chmod
strchr
_lseek
_chsize
tolower
getenv
_filelength
_stricmp
fgets
_iob
strncmp
exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
_acmdln
__doserrno
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
memset
?terminate@@YAXXZ
_controlfp
_vsnprintf
malloc
_strdup
free
_open
printf
_close
_unlink
isalpha
_getdrive
toupper
_stat
_initterm
comctl32
ord17
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE