Static task
static1
Behavioral task
behavioral1
Sample
e073744ddfe74130f8331d4c002b0b87605e599d5fe45033aaad1c16062bad12.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e073744ddfe74130f8331d4c002b0b87605e599d5fe45033aaad1c16062bad12.exe
Resource
win10v2004-20220901-en
General
-
Target
e073744ddfe74130f8331d4c002b0b87605e599d5fe45033aaad1c16062bad12
-
Size
336KB
-
MD5
e9a0605a9423f67036b350f57fbab94b
-
SHA1
4a6d44309831bded550099e383adabc45431e567
-
SHA256
e073744ddfe74130f8331d4c002b0b87605e599d5fe45033aaad1c16062bad12
-
SHA512
38da5286825bacf6214c797e62bacd9bfb3fb49450242b53f8eaeb27b5fbd49660e176e6f2a16d5fefbd1745da1ab0e31c83bc7d19e5b2a4d59285c1b10120cc
-
SSDEEP
6144:M2jyb9H98XKAw7GIUewLYlQ0g2vk/O9OHSYqZCAg5wkYGv1NVldoqmeFqf:MGyb198XK3Gnfr0g2VOy5ZCAmwgHdAe
Malware Config
Signatures
Files
-
e073744ddfe74130f8331d4c002b0b87605e599d5fe45033aaad1c16062bad12.exe windows x86
2c35ed123bf7fb5532653325910c7a41
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
VirtualFree
Sections
CODE Size: 327KB - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaoniu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.llydd Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE