Static task
static1
Behavioral task
behavioral1
Sample
97143389f7a64eff316fec66760629b3722c6d0251d07ee2e87cf91d8b3326f4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
97143389f7a64eff316fec66760629b3722c6d0251d07ee2e87cf91d8b3326f4.exe
Resource
win10v2004-20221111-en
General
-
Target
97143389f7a64eff316fec66760629b3722c6d0251d07ee2e87cf91d8b3326f4
-
Size
324KB
-
MD5
1d4dc27a73a41c5621e11974a711e76a
-
SHA1
6ee7669fd26ee7c31106917b1449807d7ae9d051
-
SHA256
97143389f7a64eff316fec66760629b3722c6d0251d07ee2e87cf91d8b3326f4
-
SHA512
48e1663cc8ecfd721c11d8af6f562c410a1f99be79cc969b0fd020addbb69941984b35fd07dc435d07198bd6bf549e288e106f424c4cf29791b4b4496c356c32
-
SSDEEP
6144:NRdbPl4IjdQF/3iaQ6s1wS28D1ut9/GnacJ+fP7JHvX:3dbPl4IjeyaXs1H2i1ut9yJCZ
Malware Config
Signatures
Files
-
97143389f7a64eff316fec66760629b3722c6d0251d07ee2e87cf91d8b3326f4.exe windows x86
f55fe7fcbc9b64bf306549e475d2329e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
RegEnumKeyExW
RegDeleteKeyA
RegEnumKeyExA
RegDeleteKeyW
RegSetValueExA
RegCreateKeyExA
kernel32
VirtualAlloc
GlobalAlloc
lstrlenA
GetModuleFileNameA
LoadLibraryA
CreateFileA
SizeofResource
GetVersionExW
CreateEventA
GetModuleHandleW
GetFileAttributesA
InterlockedCompareExchange
InterlockedExchange
EnterCriticalSection
InitializeCriticalSection
SetFilePointer
WaitForSingleObject
GetLocaleInfoA
ReadFile
HeapFree
LeaveCriticalSection
LocalFree
Sleep
LocalAlloc
ExitProcess
DeleteCriticalSection
FindClose
HeapAlloc
GlobalFree
SetStdHandle
TryEnterCriticalSection
GetModuleHandleA
GetStartupInfoA
mpr
WNetCancelConnection2A
msvcrt
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
_onexit
_except_handler3
_c_exit
_adjust_fdiv
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 285KB - Virtual size: 285KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ