Static task
static1
Behavioral task
behavioral1
Sample
maybe_lpe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
maybe_lpe.exe
Resource
win10v2004-20220812-en
General
-
Target
maybe_lpe.exe
-
Size
865KB
-
MD5
ef92df2557d2d06837a2ea60f9264c46
-
SHA1
449a6c473a36bd4b3a1bf338fcb89fb91382c8fb
-
SHA256
31e4a24da727432c277ce165fe2d46c7e8551f0d9aa5d009edd8ba1dedb36620
-
SHA512
eec9e06c49b3c3466ccdb91be94983e3c706f29165cc54d5bf0f47045851d9597597400f0bc986b9c84a0b7b66a89315369d1252c5983551aaeb158cb59a8e67
-
SSDEEP
12288:ObVZ7zugBPJotEssM0GR+G7MjIoo/HlCdnyqAjHCSdQ9Bla+L1VevC9qpMPsiRFP:SVYsu+8MkoOQdnwq9BIDKzEAgpIT
Malware Config
Signatures
Files
-
maybe_lpe.exe.exe windows x86
7e341778947aafebff20536832ffd188
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strchr
kernel32
GetVersion
RaiseException
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
EnableMenuItem
gdi32
GetDeviceCaps
comdlg32
GetSaveFileNameA
advapi32
OpenProcessToken
shell32
ShellExecuteA
comctl32
ImageList_Remove
procs
GetNumberOfProcesses
realign
WipeReloc
16edit
HEEnterWindowLoop
imagehlp
BindImageEx
Sections
Size: - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 796KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 861KB - Virtual size: 861KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ