Static task
static1
Behavioral task
behavioral1
Sample
97c8faa4a04c13534e1807ee155448a752201749694b4936acc214be307df17b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
97c8faa4a04c13534e1807ee155448a752201749694b4936acc214be307df17b.exe
Resource
win10v2004-20220812-en
General
-
Target
97c8faa4a04c13534e1807ee155448a752201749694b4936acc214be307df17b
-
Size
39KB
-
MD5
5a62c258a47f52065f6007592b8b415b
-
SHA1
eecd0d214d0edaa39438e3109e2c9eca179b4c6e
-
SHA256
97c8faa4a04c13534e1807ee155448a752201749694b4936acc214be307df17b
-
SHA512
bee33d524939fcff23accf759244c6f855d8e731cc2013c33ca91133eed45b9d1eeec8c3259f62c5e8ae609c24cb492feed8c8ace3f172e7fe19f5cdd9f8ea80
-
SSDEEP
768:cQqwbGjy1ygpLZYv87OtmxUjIlj4rD8MOj6rrYPWuvOGsnv9cod:UwbGPgpH7OMxplO4M8erYPWuvj7od
Malware Config
Signatures
Files
-
97c8faa4a04c13534e1807ee155448a752201749694b4936acc214be307df17b.exe windows x86
3b1d9cd5004691fc72ae70839e7783cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
WinExec
DisconnectNamedPipe
GetVersionExW
FindAtomA
GetTempPathW
GetLogicalDriveStringsA
lstrcpynA
CreateNamedPipeA
CopyFileExA
ExitProcess
VirtualProtectEx
GetTempPathA
GetVersionExA
GetAtomNameW
user32
DrawIcon
RegisterWindowMessageW
FillRect
CreateDialogIndirectParamW
EnumChildWindows
DefWindowProcW
OpenClipboard
GetMenuItemInfoW
MessageBeep
CreateWindowExA
GetWindowTextA
GetKeyboardLayout
gdi32
CreatePatternBrush
SetDIBits
CreateBitmapIndirect
advapi32
RegOpenKeyW
comdlg32
ReplaceTextA
PrintDlgW
ReplaceTextW
shell32
ShellExecuteA
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ