Static task
static1
Behavioral task
behavioral1
Sample
97e870f5c7115115c4f93ae8e16927043e8dd6ae0efa98b1bac83ab977160b31.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
97e870f5c7115115c4f93ae8e16927043e8dd6ae0efa98b1bac83ab977160b31.exe
Resource
win10v2004-20220812-en
General
-
Target
97e870f5c7115115c4f93ae8e16927043e8dd6ae0efa98b1bac83ab977160b31
-
Size
65KB
-
MD5
82b945809e22dbb26668c386034b757b
-
SHA1
6bbca9d8c78758f510badd89cc31ede65dcd5af6
-
SHA256
97e870f5c7115115c4f93ae8e16927043e8dd6ae0efa98b1bac83ab977160b31
-
SHA512
c4592c4f77741de87cbcf7715a85dc54c95d5b8856bb2a4d8c8b761d1df98cc370b92f961073aa2cf834ee7ac2501160c4e696032edb8c540106b1844f94f8c6
-
SSDEEP
1536:AYE6X9D8sMMOPAoKu/avRefffffIxqQ0nu8S:Ati90pPAoK60RpxqQ0n
Malware Config
Signatures
Files
-
97e870f5c7115115c4f93ae8e16927043e8dd6ae0efa98b1bac83ab977160b31.exe windows x86
fa85327a2e2f953933f22880e30fa898
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExW
FindResourceW
GetCurrentThreadId
CloseHandle
HeapCreate
PulseEvent
lstrlenA
Sleep
FindClose
GetCommandLineA
lstrcpyA
UnmapViewOfFile
GetModuleHandleA
LocalFree
SetLastError
GetComputerNameA
GetCurrentDirectoryA
CreateProcessA
GlobalUnlock
CreateFileW
user32
IsWindow
DrawMenuBar
DispatchMessageA
CheckRadioButton
CreateIcon
GetDC
DrawEdge
GetCaretPos
SetFocus
GetDlgItem
FillRect
CallWindowProcA
CreateWindowExA
rsaenh
CPGenKey
CPHashData
CPDecrypt
CPDeriveKey
CPSignHash
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xjjtduo Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE