Static task
static1
Behavioral task
behavioral1
Sample
99cec0c2e36110bfc1f391da116d6046d20872b4a3ddb16e2a9e5d4c36a8ef83.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
99cec0c2e36110bfc1f391da116d6046d20872b4a3ddb16e2a9e5d4c36a8ef83.dll
Resource
win10v2004-20220901-en
General
-
Target
99cec0c2e36110bfc1f391da116d6046d20872b4a3ddb16e2a9e5d4c36a8ef83
-
Size
105KB
-
MD5
b8e803ec019527e50c9d9237cf315f50
-
SHA1
e68ea49d9bc943cc5364ccd119c135ea3be32272
-
SHA256
99cec0c2e36110bfc1f391da116d6046d20872b4a3ddb16e2a9e5d4c36a8ef83
-
SHA512
8938f57c36e7571ffcee4729713543d486c307db465e3b53a03e8c8e36e746d08dad05a239b9d718530f36ccd6717cd35affe6aab6d92798f57079274e0db03c
-
SSDEEP
1536:TfTjfulgOJtRiByZpD+Kd8zBcscJoukr0qxbl8:jvfu/JtUB8MKd4c5ouSrn8
Malware Config
Signatures
Files
-
99cec0c2e36110bfc1f391da116d6046d20872b4a3ddb16e2a9e5d4c36a8ef83.dll windows x86
1bcffefb934d3ad18a2e436892b0d9d9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFullPathNameW
GetLastError
GetModuleHandleW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetVersionExW
GlobalAlloc
GlobalFree
FindNextFileW
LocalAlloc
QueryPerformanceCounter
SetFileAttributesW
SetFilePointer
TerminateProcess
UnhandledExceptionFilter
WriteFile
lstrcatW
lstrcmpiW
lstrcpyW
lstrcpynW
GetCurrentThread
VirtualAlloc
CreateFileW
GetStartupInfoA
FindFirstFileW
FindClose
ExitProcess
DeleteFileW
CreateSemaphoreW
LoadLibraryW
CompareStringW
user32
PostMessageW
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
SetFocus
SetWindowsHookExW
UnhookWindowsHookEx
WinHelpW
MessageBoxW
LoadIconA
GetDlgItem
GetActiveWindow
ExitWindowsEx
EndDialog
DialogBoxParamW
CharUpperW
CallNextHookEx
wsprintfW
GetDlgItemTextW
gdi32
GetStockObject
GetObjectW
CreateFontIndirectW
DeleteObject
advapi32
RegOpenKeyExW
shell32
ShellExecuteW
msvcrt
_except_handler3
__getmainargs
Sections
.55519 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55518 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55517 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55516 Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55515 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55514 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55513 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55512 Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ