?BLGG@@YAKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
e3a294856ae95ed07c279a979710870a7a5a9aa709f51d62695d242735210204.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e3a294856ae95ed07c279a979710870a7a5a9aa709f51d62695d242735210204.exe
Resource
win10v2004-20220812-en
General
-
Target
e3a294856ae95ed07c279a979710870a7a5a9aa709f51d62695d242735210204
-
Size
92KB
-
MD5
81e69b73b7181554b9757dd21f5b8280
-
SHA1
131ba01e7321761d25d269854ed29a37c9cad394
-
SHA256
e3a294856ae95ed07c279a979710870a7a5a9aa709f51d62695d242735210204
-
SHA512
cb8a3b2f67afa5d46609e178afca6b4b896cb163da99921dfecf6a746c0d53c53a3b0d72ddefd09b0208f355f994d77f04fb5fdfa6f19fb987d1d5a6f0b970ae
-
SSDEEP
1536:bzXpRmvrhVc+olvLJ5jtHc+GohNeGF6Hftuw+zA7SyoLq5vog:bMrhe+O/1cUzFFmftuLE7Sq2
Malware Config
Signatures
Files
-
e3a294856ae95ed07c279a979710870a7a5a9aa709f51d62695d242735210204.exe windows x86
70e9ef9fb0dd3f20458291308784d922
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
ResumeThread
GetProcAddress
CreateProcessA
GetTickCount
VirtualFree
OpenEventA
GetLastError
DeleteFileA
LoadLibraryA
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
user32
EnableWindow
GetFocus
SetActiveWindow
DestroyWindow
LoadBitmapA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
ws2_32
send
winmm
auxOutMessage
midiStreamOut
midiOutReset
midiStreamRestart
midiInOpen
mixerGetLineInfoA
Exports
Exports
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ