Static task
static1
Behavioral task
behavioral1
Sample
99f1a4270cc36cda75475385bc169e32e7b876345c6ae943711933ec64cf0208.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
99f1a4270cc36cda75475385bc169e32e7b876345c6ae943711933ec64cf0208.exe
Resource
win10v2004-20220901-en
General
-
Target
99f1a4270cc36cda75475385bc169e32e7b876345c6ae943711933ec64cf0208
-
Size
165KB
-
MD5
81f335f9bca15638dcf78c1402f5410a
-
SHA1
c29ee459acd647859354c592956a4ed88993ec0e
-
SHA256
99f1a4270cc36cda75475385bc169e32e7b876345c6ae943711933ec64cf0208
-
SHA512
f2a3dcf3fbbc154bd52309a9af13988c62f2be7616019b74b9c68ab293f340e014527f0003af761e704cf40cd9696805b0900abd6f6043d532cf9728ce073880
-
SSDEEP
3072:7Jlb4+F4ZFvzKAbFykRS4RtWxV4dyRUQjohXKn:7P4+F4jvS4RS3jo1C
Malware Config
Signatures
Files
-
99f1a4270cc36cda75475385bc169e32e7b876345c6ae943711933ec64cf0208.exe windows x86
032b8569bb6bb61ea002a57a0d9b00b4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc
SHChangeNotify
SHGetSpecialFolderLocation
SHGetFileInfoA
ShellExecuteExA
SHFileOperationA
ole32
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoCreateInstance
CLSIDFromString
opengl32
glReadPixels
glVertex3f
glFogf
glPointSize
glTexCoord2fv
glCopyPixels
glRecti
kernel32
FileTimeToSystemTime
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
RtlUnwind
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetOEMCP
GetACP
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
InitializeSListHead
SetStdHandle
LocalUnlock
lstrcpynA
SetUnhandledExceptionFilter
LocalLock
GetLongPathNameA
CloseHandle
CompareStringA
CreateDirectoryA
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
DosDateTimeToFileTime
EnumCalendarInfoA
GetLastError
SetFileTime
MoveFileA
SetFilePointer
SetEndOfFile
GetFileType
CreateFileW
ReadFile
GetStdHandle
SetLastError
WriteFile
GetFileAttributesA
GetFileAttributesW
SetFileAttributesA
SetFileAttributesW
GetFullPathNameA
GetCurrentDirectoryA
LoadLibraryA
FreeLibrary
GetCPInfo
IsDBCSLeadByte
GetSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
OpenFileMappingA
SetEnvironmentVariableA
GetModuleFileNameW
CreateFileMappingA
MapViewOfFile
GetCommandLineA
UnmapViewOfFile
MoveFileExA
GetTempPathA
Sleep
SetCurrentDirectoryA
WaitForSingleObject
ExpandEnvironmentStringsA
FileTimeToLocalFileTime
GetTimeFormatA
GetDateFormatA
GetProcAddress
lstrcmpiA
GetNumberFormatA
GetLocaleInfoA
ExitProcess
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
GetModuleHandleA
FindResourceA
GetModuleFileNameA
lstrlenA
GlobalAlloc
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
GetTickCount
FindFirstFileW
FindNextFileW
FindFirstFileA
FindNextFileA
FindClose
CreateDirectoryW
DeleteFileW
GetSystemTimeAsFileTime
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapSize
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
Sections
.text Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ