Static task
static1
Behavioral task
behavioral1
Sample
a99277444007509e062d3ec960cc9276615cebc0d4ea5008646b48860496d392.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a99277444007509e062d3ec960cc9276615cebc0d4ea5008646b48860496d392.exe
Resource
win10v2004-20220812-en
General
-
Target
a99277444007509e062d3ec960cc9276615cebc0d4ea5008646b48860496d392
-
Size
104KB
-
MD5
7a5edad3a2c3fa15cc7471567e26c138
-
SHA1
3fc35d8ea03f237f6d25b781469762a418fb0e42
-
SHA256
a99277444007509e062d3ec960cc9276615cebc0d4ea5008646b48860496d392
-
SHA512
dcc601ffd777ac1e30f4c8aab3b0abe4954fbae03363cdb31880ffee9e72c1eadf1f434b8f9c42a31c92683381832fef79616c6aefd1262f85f2dae075d858c7
-
SSDEEP
1536:k3SSf6uhsEeI3Cy0LkckeLL+4JNiuQotMzq3:UN9WECy0Ac1uW1QF
Malware Config
Signatures
Files
-
a99277444007509e062d3ec960cc9276615cebc0d4ea5008646b48860496d392.exe windows x86
cc37ea78745ae96fa8116df27ab99133
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetStartupInfoA
InterlockedIncrement
GetModuleHandleA
CompareFileTime
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcess
GetCurrentProcessId
InterlockedDecrement
GetCurrentThread
GetModuleHandleW
VirtualAlloc
HeapFree
LocalFree
SetStdHandle
GetStdHandle
InterlockedExchangeAdd
HeapDestroy
LocalAlloc
WaitForSingleObject
EnterCriticalSection
FreeLibrary
SetEvent
GetOEMCP
GetFileType
GetEnvironmentStrings
lstrlenA
CreateMutexW
GlobalAlloc
MultiByteToWideChar
FileTimeToSystemTime
FlushFileBuffers
ReadFile
HeapAlloc
FormatMessageW
GetFileSize
lstrlenW
CloseHandle
FindClose
LoadLibraryExW
CompareStringA
CreateEventW
Sleep
FreeLibraryAndExitThread
TlsGetValue
SetHandleCount
LoadLibraryA
TlsAlloc
WideCharToMultiByte
InitializeCriticalSection
OutputDebugStringA
FindNextFileA
HeapReAlloc
WaitForMultipleObjects
GetVersionExA
ExitProcess
GetEnvironmentStringsW
SetErrorMode
GetVersionExW
CreateThread
GlobalFree
TlsSetValue
FreeEnvironmentStringsA
TerminateProcess
SetFilePointer
GetModuleFileNameA
SizeofResource
RaiseException
GetACP
LCMapStringW
HeapSize
RtlUnwind
IsValidCodePage
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
SetConsoleCtrlHandler
GetCommandLineA
HeapSetInformation
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetProcAddress
DecodePointer
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EncodePointer
TlsFree
SetLastError
GetLastError
HeapCreate
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
GetStringTypeW
user32
GetSystemMetrics
ole32
CoTaskMemFree
OleInitialize
OleLoadFromStream
CoInitialize
CoSetProxyBlanket
CoTaskMemRealloc
msi
ord46
Sections
.text Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ