Static task
static1
Behavioral task
behavioral1
Sample
Label_LU.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Label_LU.exe
Resource
win10v2004-20220812-en
General
-
Target
395a11bcb5e043875ce1370619a37a27102e69f3279f6ba3ae585644350ab50e
-
Size
76KB
-
MD5
9aad200bade727ca226729ceeb5c2e14
-
SHA1
b98ec186887ef683b3c56b18ec2abb638bfab062
-
SHA256
395a11bcb5e043875ce1370619a37a27102e69f3279f6ba3ae585644350ab50e
-
SHA512
15a22fea1611258f07d4acb2139b79e95547e07b9d01862b1642963edc39d15bd65dc9ec17284a108496f5fbb9ba79a63a87f65b1c37e6048eb707076134458d
-
SSDEEP
1536:4eUtom7cUShgVzr4hT7UC7SFHCRM90AyDh6Yoo2X41FBdYhK+a4NhMLGqz6Ou:4tto4Z4Uz0Q28Gw0AyDhyX2QLzCeOu
Malware Config
Signatures
Files
-
395a11bcb5e043875ce1370619a37a27102e69f3279f6ba3ae585644350ab50e.zip
-
Label_LU.exe.exe windows x86
22f9bf2ad1fe588da0d2820a66825169
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentProcessId
GetModuleHandleA
LoadLibraryA
Sleep
HeapSize
GetProcAddress
SetLastError
GetLastError
GetProcessHeap
GetModuleHandleW
HeapAlloc
ExitProcess
GetModuleFileNameA
GetStdHandle
WriteFile
HeapCreate
HeapReAlloc
VirtualAlloc
VirtualFree
HeapFree
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
advapi32
MapGenericMask
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ