Static task
static1
Behavioral task
behavioral1
Sample
99097cd065042cfc47babf57f61511b7fef1578c711adf4e65c1a771085e9e65.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
99097cd065042cfc47babf57f61511b7fef1578c711adf4e65c1a771085e9e65.exe
Resource
win10v2004-20221111-en
General
-
Target
99097cd065042cfc47babf57f61511b7fef1578c711adf4e65c1a771085e9e65
-
Size
208KB
-
MD5
157d87d704b38ce3e189049d4bd1c91b
-
SHA1
537fdfa89772b4aaf183edf28509ec72c97da8c1
-
SHA256
99097cd065042cfc47babf57f61511b7fef1578c711adf4e65c1a771085e9e65
-
SHA512
a5bcd42ab49d4d90712f31ea40ebec30b40ce12a97c43585b73abbe59598ff4fad0769b97df93ae5706706a69ee8f4f01ee3568092f3843fc4498d78fb1140ac
-
SSDEEP
3072:icKgouRvMWEv6lUzHp9uj3w5ohvtZJsooPfyeyQsLgabLoXfCNfateaa87u:isou+vFzHswehFMPfCQsLg2LufYVbP
Malware Config
Signatures
Files
-
99097cd065042cfc47babf57f61511b7fef1578c711adf4e65c1a771085e9e65.exe windows x86
09822b8caef82b8e785d71212feee89d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
LoadResource
IsDBCSLeadByte
CreateMutexA
GetCurrentThreadId
GetCommandLineA
InitializeCriticalSection
lstrcpyA
GetShortPathNameA
SizeofResource
CopyFileA
GetCurrentProcess
WideCharToMultiByte
lstrlenW
lstrlenA
MultiByteToWideChar
GetModuleFileNameA
GetWindowsDirectoryA
GetModuleHandleA
GetSystemDefaultLCID
GetVersionExA
lstrcatA
DeleteCriticalSection
FreeLibrary
GetACP
FlushFileBuffers
ReadFile
SetStdHandle
SetFilePointer
IsBadCodePtr
IsBadReadPtr
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
HeapSize
TerminateProcess
LCMapStringW
LCMapStringA
GetOEMCP
GetDateFormatA
GetCPInfo
ExitProcess
GetVersion
GetStartupInfoA
RaiseException
HeapReAlloc
HeapAlloc
HeapFree
InterlockedDecrement
LoadLibraryA
GetProcAddress
GetLocaleInfoA
GetSystemDirectoryA
WriteFile
CreateFileA
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
RtlUnwind
LocalFree
InterlockedIncrement
GetUserDefaultLangID
CloseHandle
user32
CreateWindowExA
GetMessageA
PostMessageA
PostThreadMessageA
RegisterClassA
DispatchMessageA
LoadIconA
SetForegroundWindow
FindWindowA
PostQuitMessage
EnableWindow
GetDlgCtrlID
EndDialog
GetDlgItem
SetWindowTextA
WinHelpA
LoadStringA
GetWindowRect
EnableMenuItem
GetSystemMenu
EnumChildWindows
DialogBoxParamA
GetParent
SetWindowLongA
CallWindowProcA
wsprintfA
DefWindowProcA
SendMessageA
CharNextA
EnumDisplaySettingsA
GetSystemMetrics
gdi32
CreateDCA
DeleteDC
GetDeviceCaps
advapi32
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
RegEnumValueA
RegEnumKeyExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
ole32
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CLSIDFromProgID
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
CoUninitialize
CoSuspendClassObjects
oleaut32
LoadTypeLi
SysAllocString
VariantClear
SysFreeString
VarUI4FromStr
SysAllocStringByteLen
SysStringByteLen
SysStringLen
RegisterTypeLi
comctl32
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
hccutils
ReleaseClassDevice
GetCUIDriverFromClassDevice
FindDeviceByNameAndClass
GetDisplayDevice
IsDisplayValid
LoadDialogString
EnumDeviceByClass
GetAttachedMonitorDevice
FindResources
LoadSTRING
Sections
.text Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.grdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE