Static task
static1
Behavioral task
behavioral1
Sample
f097358b9c3e1dc1ff9f64b135c4d0239df01cf9f9cacc816f631b11e2a78f8d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f097358b9c3e1dc1ff9f64b135c4d0239df01cf9f9cacc816f631b11e2a78f8d.exe
Resource
win10v2004-20220812-en
General
-
Target
f097358b9c3e1dc1ff9f64b135c4d0239df01cf9f9cacc816f631b11e2a78f8d
-
Size
195KB
-
MD5
07f69d2badc9c3f8f2fce0ef267575b0
-
SHA1
8f1739416dd889b48788cbc67713a257009618e6
-
SHA256
f097358b9c3e1dc1ff9f64b135c4d0239df01cf9f9cacc816f631b11e2a78f8d
-
SHA512
18eed51f15ff8e46fb225fe58a2bb51c1358d55522fd2e1ec46e5857bac4caa94cb609dd4e332706f4b245369ebecea32e12181f9bd1fbaceb86480ed981556b
-
SSDEEP
3072:jXQ5fG6gqX7AOSwCOuYQlqghOjENAIlptog3Tl6zrueBkEckanSZMAZHV7ZLXYvM:B6OIMWH
Malware Config
Signatures
Files
-
f097358b9c3e1dc1ff9f64b135c4d0239df01cf9f9cacc816f631b11e2a78f8d.exe windows x86
df57a2a7b4b2e21a0b558c480222b82c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLastError
GetModuleFileNameA
GetCommandLineA
IsDBCSLeadByte
LocalFree
CloseHandle
ExitProcess
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
CreateFileA
WriteFile
GetStdHandle
lstrlenA
lstrcatA
lstrcpyA
FormatMessageA
FreeLibrary
GetProcAddress
LoadLibraryA
GetEnvironmentVariableA
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
lstrcmpiA
lstrcmpA
SetConsoleTitleA
GetVersionExA
SetEnvironmentVariableA
FindClose
FindFirstFileA
GetFullPathNameA
InterlockedIncrement
LocalAlloc
GetExitCodeThread
WaitForSingleObject
CreateThread
GetCurrentThreadId
LoadResource
FindResourceExA
GetUserDefaultLangID
GetSystemDefaultLangID
SetLastError
lstrlenW
RtlUnwind
user32
CharNextA
DispatchMessageA
CharLowerA
GetMessageA
CharPrevA
PostThreadMessageA
LoadStringA
CharToOemA
TranslateMessage
wvsprintfA
ole32
CoInitialize
CoRegisterClassObject
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CLSIDFromString
CoGetClassObject
CoUninitialize
oleaut32
SysFreeString
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dxqliob Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE