Static task
static1
Behavioral task
behavioral1
Sample
97b7e9641f7b54f6401f937518cf4095dc8de8228063684987934ef8767447ff.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
97b7e9641f7b54f6401f937518cf4095dc8de8228063684987934ef8767447ff.exe
Resource
win10v2004-20221111-en
General
-
Target
97b7e9641f7b54f6401f937518cf4095dc8de8228063684987934ef8767447ff
-
Size
700KB
-
MD5
c755e071f55d8e386db244c36d8a6b5b
-
SHA1
b88006e2729f7b1284e93bf78823446ba96107c4
-
SHA256
97b7e9641f7b54f6401f937518cf4095dc8de8228063684987934ef8767447ff
-
SHA512
6b2b47c92950e47b7b862f858137ca5aa5cc602d2ef686c99ea9f39636c3a976c43a336c780855c868f3ed0fe1dfd6aff42192537cf2048c3d89c9913534d2dc
-
SSDEEP
12288:Nl1XIoeCwrUXvtEIdOHYu6Sl/7qcIkzgZ2lY83xzME+Onu:NzIGwWv+I6YuL/7Ppl1xzME7n
Malware Config
Signatures
Files
-
97b7e9641f7b54f6401f937518cf4095dc8de8228063684987934ef8767447ff.exe windows x86
613bc8dd3a2a7acaace062ab18b38640
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
lstrcpy
VirtualProtect
ExitProcess
comctl32
InitCommonControls
Sections
Size: - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� Size: - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
extreme0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
extreme1 Size: 688KB - Virtual size: 684KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ