Static task
static1
Behavioral task
behavioral1
Sample
97e2c0ab9f32510463ec3a34fc474ec4bc4f141c8f04afe2f688231bb1bf19e9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
97e2c0ab9f32510463ec3a34fc474ec4bc4f141c8f04afe2f688231bb1bf19e9.exe
Resource
win10v2004-20221111-en
General
-
Target
97e2c0ab9f32510463ec3a34fc474ec4bc4f141c8f04afe2f688231bb1bf19e9
-
Size
66KB
-
MD5
1d119998e99e4e68501cedf330abff91
-
SHA1
ab155dee1df25928be2051719ce6d9d7849acc1f
-
SHA256
97e2c0ab9f32510463ec3a34fc474ec4bc4f141c8f04afe2f688231bb1bf19e9
-
SHA512
4549bfe4b873340ef3c538c28fcd087d5a6cbc2ffbd39dfad82e2792b4ae193b63ae60c93832cd0ec9af4aab470c90baed53077348b9d985a9eec8e1558311e7
-
SSDEEP
1536:nPKOnNYdnIBouR3DYYUgyek5lEYA2HIPEopVSLqJxxVfBd:1nNFB98eqEYAOszcG1fL
Malware Config
Signatures
Files
-
97e2c0ab9f32510463ec3a34fc474ec4bc4f141c8f04afe2f688231bb1bf19e9.exe windows x86
e9c1350a719bed8e3ec31e34da551b57
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsProcessorFeaturePresent
SetTapePosition
LoadLibraryExW
GetCompressedFileSizeA
GetCompressedFileSizeA
GetEnvironmentVariableW
InitializeCriticalSection
AssignProcessToJobObject
GetSystemWindowsDirectoryA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE