Static task
static1
Behavioral task
behavioral1
Sample
e7fbee1e71d21f18993c6c7d5076475e5f37f916f34864f71414c14022345a90.exe
Resource
win10v2004-20220812-en
General
-
Target
e7fbee1e71d21f18993c6c7d5076475e5f37f916f34864f71414c14022345a90
-
Size
1.8MB
-
MD5
dd6a6053881f1fb1e34307c56a5c250d
-
SHA1
dd26d98ffe45e11202e465f4d1ecc03b922e9543
-
SHA256
e7fbee1e71d21f18993c6c7d5076475e5f37f916f34864f71414c14022345a90
-
SHA512
1e9016e45784ea23000f46b7d49eac92e8c33449e08c90a23f7c1f7af641450d492815cd58db493a075a00e9de80dae2f5336cfb18425f5ae0ebcb78a1418181
-
SSDEEP
24576:txRDefj8fCV3Ghy+tuFn/TnWIKfkKKO2as5zIsoTLc6ES3Jj7E3vMgHYFa2VTprF:O5oUGo
Malware Config
Signatures
Files
-
e7fbee1e71d21f18993c6c7d5076475e5f37f916f34864f71414c14022345a90.exe windows x86
52a55fb51c40f0fd1f56d98fc22d67be
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
VirtualProtect
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetConsoleWindow
QueryPerformanceCounter
Sleep
vcruntime140
memset
_except_handler4_common
__current_exception
__current_exception_context
__FrameUnwindFilter
api-ms-win-crt-runtime-l1-1-0
abort
_initialize_onexit_table
terminate
_controlfp_s
_register_thread_local_exe_atexit_callback
_c_exit
__p___argv
__p___argc
_crt_atexit
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_cexit
_set_app_type
_seh_filter_exe
_register_onexit_function
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
user32
ShowWindow
mscoree
_CorExeMain
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 204KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ