?LORPE01@@YAKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
9eb07dcd5a66551ef29de4d221e1a4b91371006a9dac1642c8d467b9646145d7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9eb07dcd5a66551ef29de4d221e1a4b91371006a9dac1642c8d467b9646145d7.exe
Resource
win10v2004-20221111-en
General
-
Target
9eb07dcd5a66551ef29de4d221e1a4b91371006a9dac1642c8d467b9646145d7
-
Size
468KB
-
MD5
4321c1c3becede87d8bdcd9db50b1650
-
SHA1
7f16c3734155171a4cd7f1d44105649b0a9256f5
-
SHA256
9eb07dcd5a66551ef29de4d221e1a4b91371006a9dac1642c8d467b9646145d7
-
SHA512
b5cbc70724e26d71538ffc7cf54fdd87a68f6b24c06cdd23ca2a055dbd5296bf079aa1ca4f0ef7c6ba505c6acb07f9dd3464a5aec128687e77b53996f143d030
-
SSDEEP
12288:IMxsuzfd9kHLBS1N/WfXsRgG6Qwv78UT+:5s0fd9isN+vs//
Malware Config
Signatures
Files
-
9eb07dcd5a66551ef29de4d221e1a4b91371006a9dac1642c8d467b9646145d7.exe windows x86
2cd420fc2ff919b961c1a3187e0658c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
DeleteFileA
VirtualAlloc
VirtualFree
CloseHandle
Sleep
GetProcAddress
LoadLibraryA
TerminateThread
SuspendThread
WriteConsoleA
VirtualQuery
GetSystemInfo
VirtualProtect
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
FlushFileBuffers
SetFilePointer
RtlUnwind
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
GetLocaleInfoA
CreateFileA
user32
PostMessageA
SendMessageA
wsprintfA
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 424KB - Virtual size: 845KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ