97zlHnL@20
Static task
static1
Behavioral task
behavioral1
Sample
e204ce4bbe411e5b44532851f3ee95814695803e3cf02c0bed5924d0412ab4a1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e204ce4bbe411e5b44532851f3ee95814695803e3cf02c0bed5924d0412ab4a1.exe
Resource
win10v2004-20220901-en
General
-
Target
e204ce4bbe411e5b44532851f3ee95814695803e3cf02c0bed5924d0412ab4a1
-
Size
149KB
-
MD5
66a6eb188ea147e231239ca16cf47eed
-
SHA1
e7a44c58b621a32fe29dd46dc7595e5d917e3cda
-
SHA256
e204ce4bbe411e5b44532851f3ee95814695803e3cf02c0bed5924d0412ab4a1
-
SHA512
f0b50d1264b97214db5a30ae25612943ca23aeef144a14f51522596f2582101edb98526107a72d040fe59ed384447f718091d9f2ae87a489b072e2fed74a466b
-
SSDEEP
3072:gjluPYL7xnqBig1dfXENX+5+9ly2ZRPd1+kLSkqU54KgEqvJ:cYgL7xnosNO5+9pZRPCkmhU5
Malware Config
Signatures
Files
-
e204ce4bbe411e5b44532851f3ee95814695803e3cf02c0bed5924d0412ab4a1.exe windows x86
c5799404fd1702cf267187fef6c62034
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
GlobalAddAtomA
GetDateFormatA
CompareStringA
IsBadHugeReadPtr
VirtualFree
FindResourceA
GetLocalTime
DeleteFileA
GetProcessHeap
LoadLibraryA
ExitProcess
EnterCriticalSection
CloseHandle
VirtualAlloc
GetCPInfo
lstrlenW
Sleep
lstrcpyA
lstrcmpA
GetVersion
HeapFree
ExitThread
VirtualAllocEx
shell32
DragQueryFileA
user32
GetMenu
CreateMenu
GetWindowDC
GetCapture
LoadIconA
DefFrameProcA
GetDesktopWindow
CreateIcon
CreatePopupMenu
shlwapi
SHQueryValueExA
SHQueryInfoKeyA
SHEnumValueA
Exports
Exports
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ndata Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ