Static task
static1
Behavioral task
behavioral1
Sample
e97c97e2b1612899899875ce780c36fb7bb43755b28126a58e342e3dc07384ba.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e97c97e2b1612899899875ce780c36fb7bb43755b28126a58e342e3dc07384ba.exe
Resource
win10v2004-20220812-en
General
-
Target
e97c97e2b1612899899875ce780c36fb7bb43755b28126a58e342e3dc07384ba
-
Size
430KB
-
MD5
75ee1512c57c25de3c979e33a618077f
-
SHA1
e8d9b2ce520fe0805d7b47339d8a51a2b2377f8c
-
SHA256
e97c97e2b1612899899875ce780c36fb7bb43755b28126a58e342e3dc07384ba
-
SHA512
56c7b85946a1981d5126bcc83ba68fe4457a433a867da5f956a053668bf83d2bdb4bea7f3ba2575f3be6e64ba9c70f88ab82a3823572c18f231da0263d96cbeb
-
SSDEEP
6144:Mb+AjaqkrafSE+I8qD9sPfMSHMJg6F+8v0mhEyjhFECrjcibO7Mq6jRMmLRdlupO:dkpfAhC9i38g6BRXh/07L6FR1upO
Malware Config
Signatures
Files
-
e97c97e2b1612899899875ce780c36fb7bb43755b28126a58e342e3dc07384ba.exe windows x86
1c2d3c56017ffc9f272aae4a4d190dcc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
MessageBoxA
comctl32
InitCommonControls
Sections
CODE Size: 323KB - Virtual size: 664KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaozi Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taz Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE