Static task
static1
Behavioral task
behavioral1
Sample
b99a3141b38cfbadcdf6855c3a69e7fd949d96c5e83cc1f68590ef8b7b52e93c.exe
Resource
win7-20220901-en
General
-
Target
b99a3141b38cfbadcdf6855c3a69e7fd949d96c5e83cc1f68590ef8b7b52e93c
-
Size
160KB
-
MD5
3f4e2569b86f2c7c64128274da023290
-
SHA1
b1f576880212c00324ffa96a1b36505c6affe445
-
SHA256
b99a3141b38cfbadcdf6855c3a69e7fd949d96c5e83cc1f68590ef8b7b52e93c
-
SHA512
260c7da04b5a0cb6c037b5da92ac7653a40525cf9e3b555b7575787eca512772a992a0151e9bb9da4b4c3fa6a96eab2a2405b1de939e53a3bcce33bb2654eef3
-
SSDEEP
3072:JavEoaEyd5dRNLIvV2V950aXPNmBHo43gc/poM84E:BF7LItojFmpDxoM
Malware Config
Signatures
Files
-
b99a3141b38cfbadcdf6855c3a69e7fd949d96c5e83cc1f68590ef8b7b52e93c.exe windows x86
d9daf48e5f8dcab218b68e7d18858f83
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiCallClassInstaller
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiClassGuidsFromNameA
kernel32
SetFileAttributesA
Sleep
FindNextFileA
GetCurrentProcess
DeleteFileA
FindFirstFileA
GetWindowsDirectoryA
GetLastError
TerminateProcess
GetStdHandle
GetFileType
GetStringTypeA
LCMapStringW
GetStringTypeW
MultiByteToWideChar
SetEndOfFile
LCMapStringA
LoadLibraryA
GetProcAddress
SetFilePointer
GetACP
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
CloseHandle
HeapDestroy
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetCPInfo
GetOEMCP
GetEnvironmentVariableA
GetVersionExA
VirtualAlloc
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
ReadFile
CreateFileA
user32
ExitWindowsEx
MessageBoxA
SendMessageA
wsprintfA
FindWindowA
advapi32
AdjustTokenPrivileges
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
LookupPrivilegeValueA
OpenProcessToken
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rmnet Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE