Static task
static1
Behavioral task
behavioral1
Sample
f99f29148c3d9a230fd6ba4c09cc8d1f59f58635a569a8ceace72b07890afb2a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f99f29148c3d9a230fd6ba4c09cc8d1f59f58635a569a8ceace72b07890afb2a.exe
Resource
win10v2004-20220812-en
General
-
Target
f99f29148c3d9a230fd6ba4c09cc8d1f59f58635a569a8ceace72b07890afb2a
-
Size
330KB
-
MD5
61d846835f4e8d8010efeba09aca92bd
-
SHA1
a5d298d77da353fa38d22c078ca0d653863f0671
-
SHA256
f99f29148c3d9a230fd6ba4c09cc8d1f59f58635a569a8ceace72b07890afb2a
-
SHA512
d349545347539255a5091d3c304235ec82134143850dc84d5039a0788bfee59c127343e3d5e2752ac42ba9ada746c1e23e8dfcc82686aabcad081be4c3040cec
-
SSDEEP
6144:ILHnviIkzIsHFd1ZN6a4p8EuOHcjEoeuNzlE5EjuMcd9YX+zl1JzV1LTGNCj10:sHvEzI+b1aa4p7uPjEhu3EckdSQ1Jzvi
Malware Config
Signatures
Files
-
f99f29148c3d9a230fd6ba4c09cc8d1f59f58635a569a8ceace72b07890afb2a.exe windows x86
44ef45491b973c5a2ddf8ca499dd9d50
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
VirtualProtect
LoadLibraryExA
AddAtomA
GetConsoleCP
GetVersion
GetTickCount
CompareFileTime
HeapReAlloc
GetProfileIntA
lstrlenA
GlobalUnlock
GetStdHandle
SuspendThread
GetSystemDefaultLangID
GetCommandLineA
CloseHandle
InterlockedExchange
WaitForMultipleObjects
GetModuleHandleA
HeapCreate
user32
DispatchMessageA
CreateCaret
ModifyMenuA
DrawCaption
IsDialogMessage
MessageBoxA
GetMenuStringA
EnableScrollBar
DialogBoxParamA
GetKeyboardLayout
GetWindowTextA
SetPropA
GetDlgItem
CopyRect
GetKeyState
DestroyMenu
TranslateMessage
CreateCursor
FindWindowA
SetWindowPos
PaintDesktop
InsertMenuA
EqualRect
PostMessageA
SubtractRect
netapi32
DsRoleCancel
DsRoleFreeMemory
DsGetDcNextA
DsGetDcOpenA
DsGetDcNameA
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ