Static task
static1
Behavioral task
behavioral1
Sample
e8fe5a28d052a908573b49ab0a904ca4.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
e8fe5a28d052a908573b49ab0a904ca4.exe
Resource
win10v2004-20220721-en
General
-
Target
e8fe5a28d052a908573b49ab0a904ca4.exe
-
Size
275KB
-
MD5
e8fe5a28d052a908573b49ab0a904ca4
-
SHA1
b52db9d39d4ceefedb5c97c2e11bef69c93850d7
-
SHA256
7a62836c8967ef6d3c737f9aba146eb7ef5d08cacc564faaa2699efac7561b97
-
SHA512
513a851dd247b81e1ff7b6d1ec07ca896571e5d739afbcd756c50ba3f0857fd760e7c60264d0e2b9d12a60c5dedcc3625360d916e4449d20a93ccf44f941995f
-
SSDEEP
6144:/zLrC+Edn2HzOy3kA6ChxpruOXxWrf6LLheinA8K:LS+Edn2TOy3JxpruOhWb6LjA
Malware Config
Signatures
Files
-
e8fe5a28d052a908573b49ab0a904ca4.exe.exe windows x86
8c4105a8833eb6f5aff1196f6e0fcdfb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumePathNameW
GetLocaleInfoW
IsProcessInJob
SizeofResource
GetConsoleAliasExesLengthW
GetSystemTimeAdjustment
LeaveCriticalSection
GetFileAttributesA
GetFileAttributesW
ReadFile
GetCompressedFileSizeA
GetTimeZoneInformation
lstrcatA
GetEnvironmentVariableA
SetConsoleTitleA
WritePrivateProfileStringW
CreateJobObjectA
GetHandleInformation
GetLastError
GetLongPathNameW
GetPriorityClass
BeginUpdateResourceW
EnumDateFormatsExA
CreateMemoryResourceNotification
DisableThreadLibraryCalls
GetAtomNameA
LoadLibraryA
LocalAlloc
SetCalendarInfoW
GetProfileStringA
SetCommMask
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
GetCurrentDirectoryA
WaitForDebugEvent
GetCurrentProcessId
SetFileAttributesW
LCMapStringW
SetEnvironmentVariableA
CompareStringW
GetModuleHandleW
FreeEnvironmentStringsA
InitializeSListHead
WriteConsoleOutputCharacterA
SetFilePointer
SetDefaultCommConfigA
HeapSize
LocalUnlock
Sleep
GetProcAddress
ExitProcess
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetStdHandle
EnterCriticalSection
GetFileType
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapAlloc
RtlUnwind
HeapFree
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
GetStdHandle
DeleteCriticalSection
FatalAppExitA
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
CreateFileA
GetLocaleInfoA
LCMapStringA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
FlushFileBuffers
SetEndOfFile
GetProcessHeap
CompareStringA
RaiseException
user32
GetProcessDefaultLayout
advapi32
OpenEventLogA
RegCreateKeyA
GetPrivateObjectSecurity
EqualPrefixSid
EqualSid
GetServiceKeyNameW
PrivilegedServiceAuditAlarmW
Sections
.text Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nozobu Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ