Static task
static1
Behavioral task
behavioral1
Sample
b99c838bc31a0d5fe05f964d9f2e50bcc995d516fa629b2e7b2224b22a2e8f39.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b99c838bc31a0d5fe05f964d9f2e50bcc995d516fa629b2e7b2224b22a2e8f39.exe
Resource
win10v2004-20221111-en
General
-
Target
b99c838bc31a0d5fe05f964d9f2e50bcc995d516fa629b2e7b2224b22a2e8f39
-
Size
184KB
-
MD5
4b28b234bd33f1e912f21d257498bb34
-
SHA1
6c6e935fd01a54b8b67f16be954ae8ac1be4fa67
-
SHA256
b99c838bc31a0d5fe05f964d9f2e50bcc995d516fa629b2e7b2224b22a2e8f39
-
SHA512
5502fd3ca60c59f5bec8cd122fe64dffe2e40eff8e21745d13c42b055c5ae81158a62a7bf79886d944b77657332bcf004ce04e21b84d6335a175493e9a99c5a1
-
SSDEEP
3072:omQcV6k6Css7UylXwAYRCAIWxOWcPMnlcC2e9S7Y4P0vKYDaF4JH:o3c0js73hvAxZcC2eA7Y80vKlF4
Malware Config
Signatures
Files
-
b99c838bc31a0d5fe05f964d9f2e50bcc995d516fa629b2e7b2224b22a2e8f39.exe windows x86
aa75d1c95168fdc1cfba9cde668f619e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_DragLeave
ImageList_DragMove
ImageList_DragEnter
kernel32
GetEnvironmentStringsA
LocalFree
GetModuleFileNameA
WaitCommEvent
LoadLibraryW
LocalAlloc
EnumResourceNamesW
GetSystemTimeAsFileTime
ExitProcess
GetTickCount
GetVersionExA
GetCurrentThreadId
ExitProcess
DisableThreadLibraryCalls
winmm
timeGetTime
msimg32
AlphaBlend
TransparentBlt
advapi32
RegSetValueW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCreateKeyW
RegDeleteKeyW
RegCloseKey
RegEnumKeyExW
gdiplus
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromFile
GdipGetImagePixelFormat
GdipDisposeImage
gdi32
GetObjectType
SetStretchBltMode
CreateDIBSection
StretchBlt
CreatePen
DeleteDC
BitBlt
SelectObject
CreateDCW
LineTo
CreateCompatibleDC
CreateBitmap
user32
RedrawWindow
FindWindowA
ClipCursor
GetFocus
TrackPopupMenuEx
DestroyMenu
GetDesktopWindow
CreatePopupMenu
InvalidateRect
ole32
CoUninitialize
CoFreeUnusedLibraries
StringFromGUID2
CoInitialize
CoCreateInstance
Sections
.text Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsr Size: 512B - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ