Static task
static1
Behavioral task
behavioral1
Sample
97fdf0dcd1b39ab4047a70ac22ee3ad10f41d14b7a43c06cf61e93d64d7b72d9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
97fdf0dcd1b39ab4047a70ac22ee3ad10f41d14b7a43c06cf61e93d64d7b72d9.exe
Resource
win10v2004-20220812-en
General
-
Target
97fdf0dcd1b39ab4047a70ac22ee3ad10f41d14b7a43c06cf61e93d64d7b72d9
-
Size
122KB
-
MD5
4efa912ad4a0e93792834df0be1eb8e0
-
SHA1
c941b4ce0fcdcaca980eae9875c39dfdea5f31e7
-
SHA256
97fdf0dcd1b39ab4047a70ac22ee3ad10f41d14b7a43c06cf61e93d64d7b72d9
-
SHA512
4d71c87ad2ee107ad1d25a56eed1de19b6c8fb7fcf63c0e3291a76800a70e060c2d996fcd265a3510eff08d79f4c6761d68b4bf5f82a2f1f2e2e347430761cea
-
SSDEEP
3072:KtgACFxBaj+nL4IkcRDNiHGG6C5HQ+hjXy5GXxLwOyR/2+KT:Kt9YxMj+L4hmHgXyYXOOSg
Malware Config
Signatures
Files
-
97fdf0dcd1b39ab4047a70ac22ee3ad10f41d14b7a43c06cf61e93d64d7b72d9.exe windows x86
704fa13ffa31ae952e4f12c15047efb2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextVolumeMountPointA
SetThreadPriorityBoost
CloseHandle
GetOverlappedResult
EnumResourceTypesA
BackupWrite
IsValidLocale
SizeofResource
GetDiskFreeSpaceExA
GetThreadTimes
QueryPerformanceFrequency
SystemTimeToFileTime
lstrcpynW
GetFileAttributesA
SetVolumeLabelA
Process32NextW
GetSystemInfo
FindResourceExW
CreateWaitableTimerW
FreeEnvironmentStringsA
DeleteTimerQueueEx
Sleep
GlobalUnWire
GetEnvironmentVariableW
GetProcessShutdownParameters
SignalObjectAndWait
RemoveDirectoryW
GlobalMemoryStatus
EnumDateFormatsA
GetLogicalDrives
GetSystemWindowsDirectoryW
GetDiskFreeSpaceW
FindResourceExA
LocalShrink
CreateDirectoryA
WritePrivateProfileStringA
version
GetFileVersionInfoSizeW
user32
GetMenuContextHelpId
TabbedTextOutW
DestroyMenu
VkKeyScanW
GetCursorPos
GetParent
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 455B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
atqmpgz Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE