Static task
static1
Behavioral task
behavioral1
Sample
97da227254d6e620ad3ba18d1efe13c55c74d03268f3b685d64d4df2716003b3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
97da227254d6e620ad3ba18d1efe13c55c74d03268f3b685d64d4df2716003b3.exe
Resource
win10v2004-20221111-en
General
-
Target
97da227254d6e620ad3ba18d1efe13c55c74d03268f3b685d64d4df2716003b3
-
Size
34KB
-
MD5
2639d8e7ede9b6ed9b5ff17f4aad1ff4
-
SHA1
8aa55e8c40c9daf92a0ce2bc9c562c62cf3bdca7
-
SHA256
97da227254d6e620ad3ba18d1efe13c55c74d03268f3b685d64d4df2716003b3
-
SHA512
b6cb8a0827cf5d03ca6076ff98fe29a2a96aa8419e613ab950ea70e605a8b660b31fa0fc9dc547890c40cba0be52ae56816800bbdcce96bdddd7f2227563d3f6
-
SSDEEP
768:4PKnJQ6fXk3vrd+5qC6bVrrwxK88ohqAWnmINe7j792GMp8J/VUrz5:4P6p/k3vr+nKplFC9jM2J/VU
Malware Config
Signatures
Files
-
97da227254d6e620ad3ba18d1efe13c55c74d03268f3b685d64d4df2716003b3.exe windows x86
899fdde465c19195348c045df6da587f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetFileAttributesA
GetLastError
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
GetSystemTimeAsFileTime
GetStartupInfoA
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
CloseHandle
SetConsoleCtrlHandler
GetConsoleMode
GetConsoleOutputCP
WriteFile
MultiByteToWideChar
VirtualAlloc
VirtualQuery
SetFilePointer
SetStdHandle
WideCharToMultiByte
DeleteFileA
Sections
.code Size: 512B - Virtual size: 465B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.odebug Size: 512B - Virtual size: 478B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ