Static task
static1
Behavioral task
behavioral1
Sample
99a75f8f18b0339b250cd2cc9b39eec799134e2f05f9859841e7ad7d70d1f58d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
99a75f8f18b0339b250cd2cc9b39eec799134e2f05f9859841e7ad7d70d1f58d.exe
Resource
win10v2004-20220812-en
General
-
Target
99a75f8f18b0339b250cd2cc9b39eec799134e2f05f9859841e7ad7d70d1f58d
-
Size
198KB
-
MD5
a2c51a6c33d54a00a4b8ef6c47851253
-
SHA1
3a8e0e9c71bd6044435d6dcb9cf861d717e98988
-
SHA256
99a75f8f18b0339b250cd2cc9b39eec799134e2f05f9859841e7ad7d70d1f58d
-
SHA512
1b47d6c3db53a53bfeed0d4c67ee0d011141ebb82d1f8aa0c0abdf376c88a0098eae3c95bca62177fdad362a42df5b14c46be4c018d6ceb31cde1c4cd03fe8d7
-
SSDEEP
6144:jlVFIltGYXSjqArmv+vBgJsPjGkW6FPtpVS/FvFtGwuw:OGYijqArBBgePpTovhuw
Malware Config
Signatures
Files
-
99a75f8f18b0339b250cd2cc9b39eec799134e2f05f9859841e7ad7d70d1f58d.exe windows x86
04cf6cd5f21c6bdfcb64a111c4c05dff
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
GlobalUnlock
GetComputerNameW
OutputDebugStringA
GetTickCount
CreateFileW
OutputDebugStringW
GetCurrentProcess
GetSystemTimeAsFileTime
GlobalAlloc
InterlockedIncrement
LocalReAlloc
GetDateFormatW
FileTimeToLocalFileTime
GetCurrentThread
GetCPInfo
GetModuleFileNameW
LocalFree
InitializeCriticalSection
GlobalFree
GlobalLock
lstrlenW
GetLastError
FormatMessageW
GetSystemWindowsDirectoryW
lstrcpyW
GetStartupInfoA
QueryPerformanceCounter
GetModuleHandleA
lstrcmpiW
GetSystemDefaultLangID
GetProcAddress
SetLastError
InterlockedDecrement
GetEnvironmentStringsW
CloseHandle
LoadLibraryW
FileTimeToSystemTime
DeleteCriticalSection
IsBadReadPtr
SetUnhandledExceptionFilter
advapi32
RegQueryValueExW
RegEnumKeyExW
RegDeleteKeyW
RegCloseKey
RegSetValueExW
RegDeleteValueW
RegOpenKeyExW
RegCreateKeyExW
msvcrt
wcscmp
free
wcslen
vswprintf
__dllonexit
_onexit
_wcsicmp
wcsrchr
wcscpy
memmove
??2@YAPAXI@Z
mbstowcs
_initterm
_except_handler3
_wcsupr
wcsstr
malloc
__RTDynamicCast
?terminate@@YAXXZ
??3@YAXPAX@Z
wcschr
??1type_info@@UAE@XZ
wcscat
wcstoul
_adjust_fdiv
certcli
CAEnumNextCertType
CAGetCertTypePropertyEx
CAFindCertTypeByName
CACertTypeSetSecurity
CAFreeCertTypeExtensions
CAUpdateCA
CACreateCertType
CAFreeCAProperty
CAGetCertTypeKeySpec
CACertTypeGetSecurity
CAFreeCertTypeProperty
CAFindByName
CAEnumCertTypesForCA
CASetCertTypeProperty
CASetCertTypeKeySpec
CASetCertTypeFlags
CAGetCertTypeProperty
CAEnumCertTypes
CASetCertTypeExtension
CARemoveCACertificateType
CACloseCertType
CAAddCACertificateType
CAGetCAProperty
CACloseCA
CAGetCertTypeFlags
CAUpdateCertType
CAGetCertTypeExtensions
user32
EndDialog
LoadIconW
GetDC
LoadStringW
ReleaseDC
MessageBoxW
SetWindowTextW
SendMessageW
LoadBitmapW
LoadImageW
GetParent
SystemParametersInfoW
InsertMenuItemW
SetCursor
SetWindowLongW
LoadCursorW
PostMessageW
WinHelpW
SendDlgItemMessageW
GetDlgItem
GetWindowLongW
EnableWindow
wsprintfW
SetDlgItemTextW
DialogBoxParamW
RegisterClipboardFormatW
SetFocus
GetDlgItemTextA
comctl32
CreatePropertySheetPageW
PropertySheetW
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ