Static task
static1
Behavioral task
behavioral1
Sample
97e14ec3d6254802ab504e509c665dcac1b33e5642b886e4ec8ae6316b72a4e8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
97e14ec3d6254802ab504e509c665dcac1b33e5642b886e4ec8ae6316b72a4e8.exe
Resource
win10v2004-20220812-en
General
-
Target
97e14ec3d6254802ab504e509c665dcac1b33e5642b886e4ec8ae6316b72a4e8
-
Size
166KB
-
MD5
07e7ae1edff5a5e03b5423d20b39bcad
-
SHA1
5dcd70f1f1a7ec3bf892a92e1eede53a1d533ecd
-
SHA256
97e14ec3d6254802ab504e509c665dcac1b33e5642b886e4ec8ae6316b72a4e8
-
SHA512
0e588eadc50cdd16c286914cdc721874df496d92b07cc85cbcd8e4f2a7bdc17ca7e8504fed2ff7b4681f80a01f615940cbbe888561a46e0162717778229bc813
-
SSDEEP
3072:3V8zQaRr/B9ZtOH4mUNW9hGx1paztyINq7XnHWXUhIdgQu1HLa4Rk6iU/AcQCOn:OEaVXOH+NW0ItyINKHQp6eB6DoNCu
Malware Config
Signatures
Files
-
97e14ec3d6254802ab504e509c665dcac1b33e5642b886e4ec8ae6316b72a4e8.exe windows x86
377b43b464119c8df0b402b5f8ef083c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msimg32
AlphaBlend
TransparentBlt
gdi32
DeleteObject
SelectObject
GetDeviceCaps
GetTextMetricsA
GetTextExtentPointA
CreateFontIndirectA
ole32
CoGetMalloc
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
kernel32
GetThreadLocale
GetCPInfoExA
InitializeCriticalSection
TlsSetValue
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStringsW
LeaveCriticalSection
GetStartupInfoA
SetHandleCount
WriteFile
FreeEnvironmentStringsA
GetLastError
InterlockedExchange
lstrlenW
HeapSize
GetEnvironmentStrings
GetOEMCP
EnumResourceNamesW
GetFileType
GetTickCount
TlsGetValue
GetVersionExA
RaiseException
MultiByteToWideChar
InterlockedIncrement
QueryPerformanceCounter
GetStdHandle
RaiseException
GetLocaleInfoA
UnhandledExceptionFilter
EnterCriticalSection
GetCPInfo
GetACP
DeleteCriticalSection
GetCurrentProcessId
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ