Static task
static1
Behavioral task
behavioral1
Sample
97b553d1f345bba524af4f72d46941615d671f308730e2b3c59a67a359b5ba89.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
97b553d1f345bba524af4f72d46941615d671f308730e2b3c59a67a359b5ba89.exe
Resource
win10v2004-20221111-en
General
-
Target
97b553d1f345bba524af4f72d46941615d671f308730e2b3c59a67a359b5ba89
-
Size
141KB
-
MD5
f6156d1e9e0fd7836e6752b13d10e6a3
-
SHA1
d351fb0a46075c6749d76871b51b6217fa058652
-
SHA256
97b553d1f345bba524af4f72d46941615d671f308730e2b3c59a67a359b5ba89
-
SHA512
647c81c7872b82a8a7ece14071b8dc94232495acf9fd2c0e02405bd257bc10a5f8c4ea3ebee34184a88e3c42468185e62452d8ecbb12896c95c2a0306f9a1a2b
-
SSDEEP
3072:+A44tHaAJ0vF/NKtMOKy8YGeoU7Zu1AXxKWgqldVw:64l0vKyQo/UFbBxldV
Malware Config
Signatures
Files
-
97b553d1f345bba524af4f72d46941615d671f308730e2b3c59a67a359b5ba89.exe windows x86
aff0d0b933e756c98ce06e0f0d45301d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetEnvironmentVariableA
GetComputerNameW
GetCurrentDirectoryA
InterlockedDecrement
GetStartupInfoA
CreateEventA
SetLocaleInfoW
GetNumberFormatA
lstrcatA
GlobalAddAtomA
LCMapStringW
GetVersionExA
lstrcmpA
GetTimeFormatA
msvcrt
_XcptFilter
_stat64
gets
ctime
__setusermatherr
_adjust_fdiv
_except_handler3
wcsncpy
exit
exp
__set_app_type
getenv
_wgetenv
longjmp
_acmdln
_beep
_adj_fdiv_m32
_ismbblead
_sleep
_hypot
_wcsnicmp
_exit
wcsncat
_winver
_atodbl
_initterm
_findclose
_wpopen
_adj_fprem1
memcpy
__p__commode
_mbsbtype
_mbctokata
atol
strncmp
__p__fmode
__getmainargs
_waccess
_putch
_controlfp
strpbrk
Sections
.text Size: 123KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ