Static task
static1
Behavioral task
behavioral1
Sample
97d75edf0aa910829a339cb6d01111bd78a22e4f50d0c2c754ab3b4a5cf083fb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
97d75edf0aa910829a339cb6d01111bd78a22e4f50d0c2c754ab3b4a5cf083fb.exe
Resource
win10v2004-20220812-en
General
-
Target
97d75edf0aa910829a339cb6d01111bd78a22e4f50d0c2c754ab3b4a5cf083fb
-
Size
373KB
-
MD5
8293419e50ffc3bccb7f594ae9ab3ed0
-
SHA1
9524ac512e636c88cdf971fe7e2eaa55367f1212
-
SHA256
97d75edf0aa910829a339cb6d01111bd78a22e4f50d0c2c754ab3b4a5cf083fb
-
SHA512
8baed2fce70d03f2d72b7573e4de1c46ce631c9e8082f740844a90c370eaff1e402476bb913bd3b3123853df48a02fd43d933199233b2efa55afc50ca54e30a2
-
SSDEEP
6144:KSyRLdE0y+qWw+x4acg04iUOMMPEQHY87SciMy6pQBV+UdvrEFp7hKH:Xydd0WwuDMPEQHY8GcEzBjvrEH74
Malware Config
Signatures
Files
-
97d75edf0aa910829a339cb6d01111bd78a22e4f50d0c2c754ab3b4a5cf083fb.exe windows x86
f943cd2bb7906859f81eacef355fd10b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
CreateFileW
SetLastError
CreateMutexW
SetFilePointer
GetTickCount
WriteFile
GetModuleFileNameW
GetLastError
OutputDebugStringA
ReleaseMutex
GetCurrentProcessId
LocalFree
Sleep
RaiseException
IsDebuggerPresent
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InterlockedCompareExchange
GetCurrentProcess
GetFileAttributesW
GetTempPathW
GetCurrentDirectoryW
GetSystemDirectoryW
GetWindowsDirectoryW
InterlockedExchangeAdd
GetNativeSystemInfo
GetModuleHandleW
GetVersionExW
QueryPerformanceCounter
GetSystemTimeAsFileTime
CreateFileMappingW
TerminateProcess
GetStdHandle
HeapSetInformation
TlsGetValue
InterlockedIncrement
TlsSetValue
TlsAlloc
TlsFree
FlushFileBuffers
SetUnhandledExceptionFilter
InitializeCriticalSection
InterlockedExchange
RtlUnwind
GetConsoleCP
GetConsoleMode
ExitProcess
DecodePointer
HeapReAlloc
GetFullPathNameW
EncodePointer
SetStdHandle
GetFileType
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InterlockedDecrement
HeapCreate
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
WriteConsoleW
MultiByteToWideChar
GetLocaleInfoW
LCMapStringW
GetStringTypeW
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetDriveTypeW
CompareStringW
SetEnvironmentVariableA
MapViewOfFile
UnmapViewOfFile
GetStartupInfoW
HeapFree
GetProcessHeap
HeapAlloc
CreateProcessW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetCommandLineA
GetCommandLineW
FreeLibrary
WaitForSingleObject
CloseHandle
GetProcAddress
LoadLibraryW
WideCharToMultiByte
user32
EndDialog
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcW
DestroyWindow
DialogBoxParamW
TranslateAcceleratorW
MessageBoxW
RegisterClassExW
LoadCursorW
LoadIconW
GetDesktopWindow
TranslateMessage
DispatchMessageW
GetMessageW
CreateWindowExW
LoadAcceleratorsW
ole32
CoUninitialize
CoInitialize
shell32
FindExecutableW
SHGetFolderPathW
ShellExecuteExW
CommandLineToArgvW
ShellExecuteA
ShellExecuteW
winmm
timeGetTime
Sections
.text Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ