97zlHnL@20
Static task
static1
Behavioral task
behavioral1
Sample
06568c7e7a503a9115d58fb010740543713e810aec502ed8c1a8fe672d6c7aef.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
06568c7e7a503a9115d58fb010740543713e810aec502ed8c1a8fe672d6c7aef.exe
Resource
win10v2004-20220812-en
General
-
Target
06568c7e7a503a9115d58fb010740543713e810aec502ed8c1a8fe672d6c7aef
-
Size
149KB
-
MD5
6f97c6d0934c43217d51d5854062761a
-
SHA1
bc88919a85bc7acafce78b290a198cd7c5faf709
-
SHA256
06568c7e7a503a9115d58fb010740543713e810aec502ed8c1a8fe672d6c7aef
-
SHA512
b706e95e278315e045a28b2dced946b609bdf449e1f7b5ecdc0120fe6484172b896b42f3d6cfff41c6500c5ffaebf2d7ddad14df68350cee0efe900783a01001
-
SSDEEP
3072:gjluPYL7xnqBag1dfXENX+5+9ly2ZRPd1+kLSkqU54KgEqvJ:cYgL7xno0NO5+9pZRPCkmhU5
Malware Config
Signatures
Files
-
06568c7e7a503a9115d58fb010740543713e810aec502ed8c1a8fe672d6c7aef.exe windows x86
c5799404fd1702cf267187fef6c62034
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
GlobalAddAtomA
GetDateFormatA
CompareStringA
IsBadHugeReadPtr
VirtualFree
FindResourceA
GetLocalTime
DeleteFileA
GetProcessHeap
LoadLibraryA
ExitProcess
EnterCriticalSection
CloseHandle
VirtualAlloc
GetCPInfo
lstrlenW
Sleep
lstrcpyA
lstrcmpA
GetVersion
HeapFree
ExitThread
VirtualAllocEx
shell32
DragQueryFileA
user32
GetMenu
CreateMenu
GetWindowDC
GetCapture
LoadIconA
DefFrameProcA
GetDesktopWindow
CreateIcon
CreatePopupMenu
shlwapi
SHQueryValueExA
SHQueryInfoKeyA
SHEnumValueA
Exports
Exports
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ndata Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ