Static task
static1
Behavioral task
behavioral1
Sample
99317b09be0583cff8c9fa5e4c7a293210c7fa01cf9f23eb2f3ca86a4f8c24da.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
99317b09be0583cff8c9fa5e4c7a293210c7fa01cf9f23eb2f3ca86a4f8c24da.exe
Resource
win10v2004-20220812-en
General
-
Target
99317b09be0583cff8c9fa5e4c7a293210c7fa01cf9f23eb2f3ca86a4f8c24da
-
Size
416KB
-
MD5
338173dfd00cfa43f6978182ba69d6b0
-
SHA1
5495a84a842beca91e1be7bd360cee440df0c467
-
SHA256
99317b09be0583cff8c9fa5e4c7a293210c7fa01cf9f23eb2f3ca86a4f8c24da
-
SHA512
8d632cc2e29244f1d3b617fe8a8c847237cca49c78ac4fa0c4ea404d3fb14e418e6676c0d54b16ff06d88e723c6c3064b398247527682bd11dd86f5facc1d3d7
-
SSDEEP
6144:bvLxlRBLwCpiD4kXWUu3pmi9ITPNe6oZLKV9VZXDDP9xVDk:bvNlPwCpu44gmewN9gWDh
Malware Config
Signatures
Files
-
99317b09be0583cff8c9fa5e4c7a293210c7fa01cf9f23eb2f3ca86a4f8c24da.exe windows x86
34fcbd7365e2bc3049c9b782619e6f91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
GetThreadContext
CreateDirectoryW
FindFirstFileW
lstrcmpiW
FindNextFileW
SetFileAttributesW
DeleteFileW
GetModuleHandleW
FindResourceW
LockResource
FreeLibrary
lstrcpynW
InitializeCriticalSectionAndSpinCount
DisableThreadLibraryCalls
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
SetEvent
CloseHandle
CreateThread
GetLastError
CreateEventW
SuspendThread
GetCurrentProcess
IsBadCodePtr
IsBadReadPtr
lstrlenW
lstrcmpiA
GetConsoleWindow
LoadLibraryA
InterlockedExchange
GetProcAddress
LocalFree
LocalAlloc
RaiseException
ole32
CoTaskMemFree
CoTaskMemAlloc
CoGetObjectContext
CoUninitialize
CoInitializeEx
Sections
.text Size: 370KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didat Size: 2KB - Virtual size: 721B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.5 Size: 2KB - Virtual size: 913B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 820B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ