Static task
static1
Behavioral task
behavioral1
Sample
99c2cc8d374cba6e9d83ef230fcca5c208cc18c502e1e6afff7dadb05d28165f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
99c2cc8d374cba6e9d83ef230fcca5c208cc18c502e1e6afff7dadb05d28165f.exe
Resource
win10v2004-20220812-en
General
-
Target
99c2cc8d374cba6e9d83ef230fcca5c208cc18c502e1e6afff7dadb05d28165f
-
Size
1.0MB
-
MD5
e6cc9c8e9480c6fc7374d735761626e4
-
SHA1
c470c68f6f066196be8658f6748ab356ee4e0e69
-
SHA256
99c2cc8d374cba6e9d83ef230fcca5c208cc18c502e1e6afff7dadb05d28165f
-
SHA512
7c707fd52ef52ca356f8862e1ecef07261f2123d07534ad83758f77876d886741196a16519ec53d044b9d832d61f4f9169438869bcc6aca41acc56662a2fb156
-
SSDEEP
12288:xw9ezFXTSvmbZkCkWrs5/mzfi2AJ03eAmJwjUz70NqqqFZ6US62QCo4609UyPcBY:pt1VfkMs5Mi2oFAmJzdbEUyIiFQwzes
Malware Config
Signatures
Files
-
99c2cc8d374cba6e9d83ef230fcca5c208cc18c502e1e6afff7dadb05d28165f.exe windows x86
a54c7acb53d07552cd785d7acfb4c961
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
rasapi32
RasGetHport
RasGetCredentialsW
RasGetCustomAuthDataW
RasConnectionNotificationW
RasValidateEntryNameW
RasSetEapUserDataA
RasDeleteEntryW
RasGetErrorStringW
RasDialW
RasEnumConnectionsW
RasHangUpW
RasEnumConnectionsA
RasSetCustomAuthDataW
RasFreeEapUserIdentityW
RasEnumEntriesW
gdi32
GetTextExtentPointA
ArcTo
RectVisible
GetNearestPaletteIndex
EqualRgn
EngFillPath
advapi32
GetAclInformation
GetSidSubAuthority
LsaICLookupSids
DeleteAce
RegSetValueExA
AreAllAccessesGranted
LsaEnumerateTrustedDomains
GetEffectiveRightsFromAclW
SetEntriesInAclW
AddAuditAccessAce
RegSetValueW
SetTokenInformation
ChangeServiceConfig2W
I_ScSetServiceBitsW
GetCurrentHwProfileA
GetSidLengthRequired
RegisterServiceCtrlHandlerW
GetSidIdentifierAuthority
SystemFunction029
CryptGenKey
RegCreateKeyExW
RegQueryValueExA
uxtheme
DrawThemeBackground
GetThemeAppProperties
GetThemePartSize
SetWindowTheme
GetThemeBackgroundExtent
GetThemeSysFont
GetCurrentThemeName
GetThemeBackgroundRegion
GetThemeFont
CloseThemeData
DrawThemeText
kernel32
SetConsoleCtrlHandler
GetSystemDefaultLCID
GetComputerNameA
ResetEvent
PulseEvent
FlushFileBuffers
GetVersionExW
GetConsoleTitleA
GetCompressedFileSizeW
GetFileAttributesExW
GetSystemWindowsDirectoryW
OpenEventA
GetNamedPipeHandleStateA
CallNamedPipeA
GetProcessTimes
SetEvent
lstrcpynW
SetFileAttributesW
VirtualAlloc
GetProcessIoCounters
EnumResourceTypesW
GetCurrentDirectoryA
GetVolumeNameForVolumeMountPointW
AddAtomA
CreateEventW
RemoveDirectoryA
GetUserDefaultLangID
GetFileTime
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 112KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text1 Size: 200KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 300KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 108KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 140KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 80KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ