Static task
static1
Behavioral task
behavioral1
Sample
102d1cbf533ab1318ed489bf8364c68eddb68e6da804641a7b33d88524a28c0a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
102d1cbf533ab1318ed489bf8364c68eddb68e6da804641a7b33d88524a28c0a.exe
Resource
win10v2004-20220812-en
General
-
Target
102d1cbf533ab1318ed489bf8364c68eddb68e6da804641a7b33d88524a28c0a
-
Size
92KB
-
MD5
0ee4b80b38cf2309c0b1eae3619f5be0
-
SHA1
3498571b000109e1272607d87510dbc4ca22b096
-
SHA256
102d1cbf533ab1318ed489bf8364c68eddb68e6da804641a7b33d88524a28c0a
-
SHA512
19c5a3d0a7bbc1235eff33e98398e57c7040630e7984f3e66ec2d421eb828e5982e0ba6f0f2ae9ef7c0fd6b4f08925bd4310845e7a3b204397637ecb56a7d335
-
SSDEEP
1536:2BO+h86RMxU7TzwS8Ia9iH2GU8yPAs7RT9THucgoBg2HP3tEnxQn5NCli9qZYBtP:aO+GusD9iH298gjtxHih2v3tEnxaCMs2
Malware Config
Signatures
Files
-
102d1cbf533ab1318ed489bf8364c68eddb68e6da804641a7b33d88524a28c0a.exe windows x86
8243ca272681840b66abfbfad82fb10c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
FindClose
HeapValidate
RemoveDirectoryA
ReleaseMutex
GetTimeZoneInformation
VirtualAlloc
GetCommandLineA
GetStartupInfoA
ExitProcess
ntdll
RtlLockHeap
strncat
NtDeleteFile
NtCreateFile
NtWriteFile
Sections
.text Size: 4KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.adata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 604B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WEIJUNLI Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ