Static task
static1
Behavioral task
behavioral1
Sample
099c3f57260a402ea499b8117874bf40c14e95d73fe2b16a820a48bca721b1a8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
099c3f57260a402ea499b8117874bf40c14e95d73fe2b16a820a48bca721b1a8.exe
Resource
win10v2004-20220812-en
General
-
Target
099c3f57260a402ea499b8117874bf40c14e95d73fe2b16a820a48bca721b1a8
-
Size
273KB
-
MD5
534ce763231c19fa1755d7ebee777170
-
SHA1
6f20a4bbb18ec4aa815230b36c81836f0f367a2b
-
SHA256
099c3f57260a402ea499b8117874bf40c14e95d73fe2b16a820a48bca721b1a8
-
SHA512
399d608fbdff31bf671de4197628ac80643479588f24d337bb23585306a9d3dd7d7ab8573fe26e48cfc73ebea2f727d6919de6f609b14138aa816fd1a3054b4b
-
SSDEEP
6144:Zwq39u2lmKVaxDWivZUOzn6r3/dmU6bxUpPM5IGj58TaUHFZ:ZwuQ2AKAxDWi2Ozn6r3/4Bbx2MChhHFZ
Malware Config
Signatures
Files
-
099c3f57260a402ea499b8117874bf40c14e95d73fe2b16a820a48bca721b1a8.exe windows x86
e7b8c39567a14137ac7dde2d6425360b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memcpy
calloc
_CIacos
printf
_CIpow
__dllonexit
_onexit
??1type_info@@UAE@XZ
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
mbstowcs
_beginthreadex
rand
strcat
strncat
vsprintf
exit
fopen
fwrite
fclose
strrchr
_except_handler3
free
strcmp
strcpy
malloc
memcmp
__CxxFrameHandler
??2@YAPAXI@Z
memmove
_ftol
strlen
memset
_strupr
_CxxThrowException
wcscpy
atoi
wcstombs
_access
wcslen
??3@YAXPAX@Z
kernel32
CloseHandle
InterlockedExchange
LocalAlloc
FreeLibrary
LocalFree
WideCharToMultiByte
lstrlenW
GetStartupInfoA
GetModuleHandleA
GetExitCodeThread
TerminateThread
CreateThread
lstrlenA
MultiByteToWideChar
GetLastError
InterlockedDecrement
SetEvent
WaitForSingleObject
LoadLibraryA
GetProcAddress
RaiseException
Sleep
CreateEventA
user32
IsWindow
SendMessageA
GetMessageA
PostThreadMessageA
CreateWindowExA
msvcp60
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
ole32
CLSIDFromProgID
CLSIDFromString
OleRun
CoCreateInstance
CoInitialize
CoUninitialize
oleaut32
VariantInit
CreateErrorInfo
VariantChangeType
VariantClear
SysAllocString
SysFreeString
GetErrorInfo
SetErrorInfo
msvfw32
ICSendMessage
Sections
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 222KB - Virtual size: 250KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didat Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE