Static task
static1
Behavioral task
behavioral1
Sample
99a6040231128cd22b11f29a3064399d073327af0ed510f0aad81794633fd7d0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
99a6040231128cd22b11f29a3064399d073327af0ed510f0aad81794633fd7d0.exe
Resource
win10v2004-20220812-en
General
-
Target
99a6040231128cd22b11f29a3064399d073327af0ed510f0aad81794633fd7d0
-
Size
700KB
-
MD5
ae9899c40953d5e1a541d7df0453078e
-
SHA1
f4a13be4a1d03b610eb73378110541dfdb8a17a1
-
SHA256
99a6040231128cd22b11f29a3064399d073327af0ed510f0aad81794633fd7d0
-
SHA512
f61dcb08a6c248f5d166cdaaf81e5c67e19d311cbc49a96e38488f823c560a9ed4edf50e30fab235d341e199e4b587d325f62f1d4fb732f92c0e9e2bfd1442a4
-
SSDEEP
12288:rH86BHTKafExrjKDRJbJtAi7PeyAFnhxLBliSk9lWj5skZtRS:L86BHTKLx/K11Ai7bAHxLLiSkbot8
Malware Config
Signatures
Files
-
99a6040231128cd22b11f29a3064399d073327af0ed510f0aad81794633fd7d0.exe windows x86
1a25cf7826a7ab2994d33be6e0c08d9b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LoadLibraryA
CreateFileA
GetCurrentProcess
ExitProcess
LCMapStringA
user32
CloseWindow
wsprintfA
SetWindowLongA
CharLowerBuffA
CreateWindowExA
advapi32
RegDeleteValueA
RegSetValueA
RegCreateKeyA
RegQueryValueA
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegEnumValueA
Sections
.text Size: 677KB - Virtual size: 680KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ