Static task
static1
Behavioral task
behavioral1
Sample
c99298eecf28627b86b7b4561695a69a79637b066f6be62ffd2d5897981cec74.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c99298eecf28627b86b7b4561695a69a79637b066f6be62ffd2d5897981cec74.exe
Resource
win10v2004-20221111-en
General
-
Target
c99298eecf28627b86b7b4561695a69a79637b066f6be62ffd2d5897981cec74
-
Size
73KB
-
MD5
999bb93b0674c2c68b68858cb5d64d70
-
SHA1
e092edac61eb95c4449126462205fc320bbbfc2f
-
SHA256
c99298eecf28627b86b7b4561695a69a79637b066f6be62ffd2d5897981cec74
-
SHA512
fb3549d2c2bda455d6e4847bd6b532d24d64690b7af7ab9ee2a28ee253c16c1065363cef11f976387fb0549fa044eed717e420ba4fddae5dd079c7b6558f41c8
-
SSDEEP
768:y4fHR40jjdc8gBcc0QQipEnJ1/CZwoaQX9A/ooNy2K0dyMeB:yqRl9czcrZi6DCOQX9foMCe
Malware Config
Signatures
Files
-
c99298eecf28627b86b7b4561695a69a79637b066f6be62ffd2d5897981cec74.exe windows x86
a1aaf157debc67a9896ffda13fbe0d69
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
Sleep
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetCurrentDirectoryA
FreeResource
ExitProcess
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
LoadLibraryA
FindResourceA
GetSystemDirectoryA
GetTempPathA
GetCurrentThreadId
MoveFileA
DeleteFileA
GetLastError
GetStartupInfoA
GetVersionExA
GetModuleHandleA
GetProcAddress
SizeofResource
GetSystemInfo
user32
GetInputState
PostThreadMessageA
GetMessageA
FindWindowA
PostMessageA
GetProcessWindowStation
GetThreadDesktop
SetProcessWindowStation
OpenDesktopA
SetThreadDesktop
CloseWindowStation
CloseDesktop
wsprintfA
OpenWindowStationA
advapi32
RegOpenKeyExA
RegSetValueExA
RegOpenKeyA
RegDeleteValueA
RegCloseKey
shell32
ShellExecuteA
msvcrt
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_except_handler3
_controlfp
__set_app_type
_XcptFilter
_exit
sprintf
rename
__CxxFrameHandler
??3@YAXPAX@Z
??1type_info@@UAE@XZ
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ