Static task
static1
Behavioral task
behavioral1
Sample
97c7376e205f923ab3a6be4888f641cd9483a70138f6fe7b7ed969089b7dc3bd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
97c7376e205f923ab3a6be4888f641cd9483a70138f6fe7b7ed969089b7dc3bd.exe
Resource
win10v2004-20220901-en
General
-
Target
97c7376e205f923ab3a6be4888f641cd9483a70138f6fe7b7ed969089b7dc3bd
-
Size
246KB
-
MD5
cda36a94f51833e7317ee93205fe74fb
-
SHA1
eb66a32e2689cf03d3e565d32f72a3efd9788eee
-
SHA256
97c7376e205f923ab3a6be4888f641cd9483a70138f6fe7b7ed969089b7dc3bd
-
SHA512
f25625b32d1d2d77f7559f9cab0557be0b73cec5c86f2330fecd35ddf0b8fec77936a98dabd2a9f7de0ebb1641f1fe01994eb918b822ee3167112a7209a0b462
-
SSDEEP
3072:zB9DV0StxUeRviq5R8TyKkHZF+z0shPics1EdEvAVwf08LDK3hhBhZKj1QECB:b5VxUeZwiZ0z0sEQmAVk08Lqn2jSEc
Malware Config
Signatures
Files
-
97c7376e205f923ab3a6be4888f641cd9483a70138f6fe7b7ed969089b7dc3bd.exe windows x86
e14178f92661e2e97b03d64ca06f8c3d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DlgDirListA
GetAltTabInfoW
CallWindowProcW
LookupIconIdFromDirectory
SetDoubleClickTime
ModifyMenuA
GetMenuItemInfoW
HideCaret
GetWindowWord
OpenInputDesktop
AnyPopup
ScrollWindowEx
GetClassNameW
comdlg32
GetOpenFileNameA
GetSaveFileNameA
shell32
ShellExecuteA
ole32
CreateStreamOnHGlobal
advapi32
RegQueryValueA
RegCloseKey
RegOpenKeyExA
kernel32
VirtualQuery
GetSystemInfo
GetConsoleOutputCP
SetFilePointer
CompareStringA
GetConsoleMode
SetStdHandle
WriteConsoleW
VirtualProtect
GetConsoleCP
CompareStringW
SetEnvironmentVariableA
FlushFileBuffers
GetCommandLineA
GlobalHandle
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcpyA
WinExec
OpenFile
GetWindowsDirectoryA
DeleteFileA
MoveFileA
LocalFree
LocalAlloc
CloseHandle
FileTimeToDosDateTime
GetFileInformationByHandle
GetFileSize
CreateFileA
MulDiv
Sleep
GetModuleFileNameA
FindClose
FindFirstFileA
GetCurrentThreadId
WriteConsoleA
lstrlenA
SetConsoleScreenBufferSize
AllocConsole
GetStdHandle
GetPrivateProfileIntA
GetModuleHandleA
GetStartupInfoA
CreateWaitableTimerA
InitializeSListHead
LoadResource
WritePrivateProfileSectionA
EnumCalendarInfoExW
FindResourceExA
CreateTapePartition
GetSystemTimeAsFileTime
RtlUnwind
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetProcAddress
ExitProcess
GetLocalTime
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringA
HeapAlloc
GetLastError
HeapFree
HeapReAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
WideCharToMultiByte
WriteFile
DeleteCriticalSection
LoadLibraryExA
InitializeCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
MultiByteToWideChar
VirtualAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
Sections
.text Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ