Static task
static1
Behavioral task
behavioral1
Sample
99fb223812f58cc46a88236e23699959.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
99fb223812f58cc46a88236e23699959.exe
Resource
win10v2004-20231215-en
General
-
Target
99fb223812f58cc46a88236e23699959
-
Size
216KB
-
MD5
99fb223812f58cc46a88236e23699959
-
SHA1
bf739ba49752f0d293476ed8faa66ffb7c6b1e6d
-
SHA256
4f7dc18370690b4ec6cbde64dc3f1a88fa2ac4745ec45772be252cd6ebf853fb
-
SHA512
b8a3262f1f4c20fe19f1782bd25f24cb86d6f1e7ce413fd2f7abee42f122c1e87c7fea170d1b86c1cc3087c07e1686904da6afd01e2470d6f5511be40068ad0d
-
SSDEEP
3072:8k3p69WFlUZdMT3cVbG8+OzDcs1+NRRdPIp2:h3ptFlKqMf+ScywRdY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99fb223812f58cc46a88236e23699959
Files
-
99fb223812f58cc46a88236e23699959.exe windows:1 windows x86 arch:x86
451bfbcb8cc47348a65f79db0ec611b5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PostQuitMessage
GetSubMenu
SetCursor
MapWindowPoints
GetSystemMenu
SendMessageA
CreateDialogParamW
GetFocus
PtInRect
CharNextW
FillRect
UpdateWindow
UpdateWindow
GetKeyState
CopyRect
GetCursorPos
MoveWindow
SetDlgItemTextW
ReleaseCapture
GetMenu
ScreenToClient
MessageBoxW
LoadMenuW
GetParent
GetMessageW
GetDesktopWindow
LoadStringW
PtInRect
DispatchMessageW
LoadStringA
GetDC
GetMessageW
FillRect
WinHelpW
SetFocus
IsWindowVisible
SystemParametersInfoW
ShowWindow
GetDlgCtrlID
EnableWindow
LoadStringA
LoadAcceleratorsW
advapi32
InitializeAcl
RegCreateKeyExW
GetTokenInformation
GetLengthSid
FreeSid
InitializeAcl
GetTokenInformation
GetTokenInformation
GetLengthSid
RegSetValueExW
RegCreateKeyExA
RegOpenKeyExW
RegCreateKeyExW
CloseServiceHandle
CloseServiceHandle
CloseServiceHandle
RegCloseKey
InitializeAcl
RegCreateKeyExW
RegQueryValueExW
GetTokenInformation
RegCreateKeyExW
FreeSid
InitializeAcl
OpenThreadToken
RegCreateKeyExW
RegEnumKeyExW
RegDeleteKeyW
InitializeSecurityDescriptor
RegSetValueExW
RegOpenKeyExW
RegOpenKeyExA
GetLengthSid
RegQueryInfoKeyW
FreeSid
GetLengthSid
CloseServiceHandle
RegCloseKey
GetTokenInformation
RegDeleteValueW
RegOpenKeyExW
kernel32
GetACP
MultiByteToWideChar
SetLastError
GetTickCount
GetStartupInfoA
GetStartupInfoA
LocalAlloc
GetACP
GetACP
SetUnhandledExceptionFilter
WaitForSingleObject
InterlockedDecrement
GetACP
InterlockedIncrement
GetProcessHeap
InterlockedIncrement
GetCurrentProcess
GetModuleFileNameA
CreateFileW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetStartupInfoW
GetCommandLineA
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetModuleHandleW
SetEvent
ExitProcess
ReadFile
InitializeCriticalSection
InterlockedDecrement
GetVersionExA
GetVersionExA
lstrlenW
DeleteCriticalSection
Sections
.idata Size: 181KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.gdata Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE