Static task
static1
Behavioral task
behavioral1
Sample
e7076a3303f109e81cdf10bfd09b5d0a.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
e7076a3303f109e81cdf10bfd09b5d0a.exe
Resource
win10-en-20211208
General
-
Target
e7076a3303f109e81cdf10bfd09b5d0a
-
Size
468KB
-
MD5
e7076a3303f109e81cdf10bfd09b5d0a
-
SHA1
30adb3336dba902cfb3f615394b53480b8976694
-
SHA256
53b60511d295d3bd9c9524f275a4962d8e1cad17ee84d0676ef16bdae07d26bf
-
SHA512
5fd8e53f733ce5b45acb80669678adc8cfd7cb4724b522130776a235c6abc2c73310f9f2b8f5e5f1eb20f20ea4ad040a5dda084793b199199a198d8315be610c
-
SSDEEP
6144:HHIpEQ9ZIHLmkougahNo3Ykhc/2rmlJsUJM0218+X5rUn620mRZGcYTCcp2LTl/:IpEgALfoR2PoUu0PU2XZnYPUv6bkF/
Malware Config
Signatures
Files
-
e7076a3303f109e81cdf10bfd09b5d0a.exe windows x86
054c65c5532e2ee652f04ac31bc2b8ff
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
CopyRect
advapi32
RegQueryValueA
shell32
SHChangeNotifyRegister
comctl32
DSA_Create
mscoree
_CorExeMain
Sections
CODE Size: - Virtual size: 220KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE