Static task
static1
Behavioral task
behavioral1
Sample
97f457a2aec9db1d9676379ba076ca1447bb5baa13a430db261113091067da93.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
97f457a2aec9db1d9676379ba076ca1447bb5baa13a430db261113091067da93.exe
Resource
win10v2004-20220812-en
General
-
Target
97f457a2aec9db1d9676379ba076ca1447bb5baa13a430db261113091067da93
-
Size
91KB
-
MD5
0cc2407173b7c894bee3e1fecaab6970
-
SHA1
4dba3592dbd11617b1d4d6ce753baf10b0d0db0c
-
SHA256
97f457a2aec9db1d9676379ba076ca1447bb5baa13a430db261113091067da93
-
SHA512
74e940620dbc869b77e1fac57e7770e59c7963798de156a07a45857e89b4ef0b5830dbe65e6d33764dfc27cae051fb3c2e74c7d1f766dd9d67ef6986fb2bbb42
-
SSDEEP
1536:rJuZMCqXEK7u9bJAEF5djaQtcQ3deJdk14DIUbmCqMIP:VuZMCq0iYb6A5dRBeJdsYlIP
Malware Config
Signatures
Files
-
97f457a2aec9db1d9676379ba076ca1447bb5baa13a430db261113091067da93.exe windows x86
4f325a4c7048a14e1ee7bee798f59ef1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
LocalAlloc
SetHandleCount
GetModuleHandleW
QueryPerformanceFrequency
GetThreadContext
Module32First
CompareStringA
ExitProcess
HeapFree
ExpandEnvironmentStringsA
FreeLibrary
SetThreadAffinityMask
lstrlenA
FindClose
WriteConsoleW
GetModuleHandleA
GetStartupInfoA
WriteConsoleA
GetEnvironmentStringsW
GlobalReAlloc
WideCharToMultiByte
GetFileType
LCMapStringA
Module32Next
user32
GetDlgItem
GetDlgCtrlID
CheckMenuRadioItem
SetDlgItemTextA
DrawEdge
GetWindowDC
BeginDeferWindowPos
GetSysColor
wsprintfA
GetClientRect
CheckDlgButton
DrawMenuBar
GetSystemMetrics
EnumWindows
MsgWaitForMultipleObjects
RegisterClassExA
DispatchMessageA
SetMenuItemInfoA
gdi32
CreateRectRgnIndirect
RectInRegion
CreateCompatibleBitmap
SetTextAlign
RestoreDC
Polyline
SetBkMode
SetBkColor
GetTextMetricsA
DeleteObject
GetStockObject
GetBkMode
CreatePen
BitBlt
CreateRectRgn
GetTextExtentPoint32A
msvcrt
_wremove
_exit
_cexit
_controlfp
_mbsnicmp
_fputchar
fwrite
is_wctype
__p__commode
__p__fmode
_except_handler3
memmove
_adjust_fdiv
_wgetenv
isspace
_acmdln
_wfopen
_umask
_snprintf
__setusermatherr
_wcstoui64
_nextafter
setbuf
_heapused
wcscat
_initterm
_adj_fdiv_m32i
_XcptFilter
__set_app_type
_wcsncoll
_adj_fptan
_toupper
memcpy
strcpy
log
_wstrdate
__getmainargs
exit
_utime64
_mbsnccnt
_wfreopen
_mbschr
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ