Static task
static1
Behavioral task
behavioral1
Sample
97da74e6a51e15b566f940a648c28026f79383d5329e482b8332571c364df46d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
97da74e6a51e15b566f940a648c28026f79383d5329e482b8332571c364df46d.exe
Resource
win10v2004-20220812-en
General
-
Target
97da74e6a51e15b566f940a648c28026f79383d5329e482b8332571c364df46d
-
Size
346KB
-
MD5
a0449998c03361eb4bebed69ceedf18a
-
SHA1
33c17393cbd42dcbb601f118fdfc48661e4ae756
-
SHA256
97da74e6a51e15b566f940a648c28026f79383d5329e482b8332571c364df46d
-
SHA512
e8e57ce506b5841570814d06551dc0203756cafea69a32228030eedf8ba570834d5712840e70484c2ce838a972351b0aed01e4a597fc070a88cbbf47cd73f2d4
-
SSDEEP
6144:UlHT3v//DNzijrBEzhXRsLzFOciNpnS/lOKuVK/sCIghgMOxaNGC:ozf/bMBEzhXRsAE/lHugIMgMwaND
Malware Config
Signatures
Files
-
97da74e6a51e15b566f940a648c28026f79383d5329e482b8332571c364df46d.exe windows x86
ae0a5112fe1176f4e5f6e1bc95e4c209
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 332KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE