Static task
static1
Behavioral task
behavioral1
Sample
99b045252f5fa05a444075af8b15f976729edc855e1150dfc6d2ac46a1b29d50.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
99b045252f5fa05a444075af8b15f976729edc855e1150dfc6d2ac46a1b29d50.exe
Resource
win10v2004-20220812-en
General
-
Target
99b045252f5fa05a444075af8b15f976729edc855e1150dfc6d2ac46a1b29d50
-
Size
76KB
-
MD5
0c25b7c6855630ce4bd247dbdd78a1f2
-
SHA1
84b82073405399f0b2d056ec1d7567998a965f1a
-
SHA256
99b045252f5fa05a444075af8b15f976729edc855e1150dfc6d2ac46a1b29d50
-
SHA512
9ca8cefef385befec39bce0e70cb2863258562a2157584a36cc23ab17231cfe63b97007eff3d934786840009f0f54e3a02be1a6912d9556d0daa144b6207da0a
-
SSDEEP
1536:s/8T6Gnoo53tdpbhMC1jVf/hpREFW0kMwVHOEIwN/3gjEErxTWDTMqhGKYIZTETw:s/TcJ5dPhMCd5TaI0kMBUNPgjBkMqhG6
Malware Config
Signatures
Files
-
99b045252f5fa05a444075af8b15f976729edc855e1150dfc6d2ac46a1b29d50.exe windows x86
fcfc6a5feba52e2dfb37a9facfce0fbb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextChangeNotification
SetConsoleCtrlHandler
GetCommProperties
FindResourceA
GetSystemDirectoryW
LZStart
LZDone
TlsSetValue
_hwrite
lstrcmpiA
WriteProfileStringA
GetTempFileNameW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE