Static task
static1
Behavioral task
behavioral1
Sample
e975e654edd187a2be4af3f62a87932e8e20fd93a272e71b46d037ba2da811bb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e975e654edd187a2be4af3f62a87932e8e20fd93a272e71b46d037ba2da811bb.exe
Resource
win10v2004-20220812-en
General
-
Target
e975e654edd187a2be4af3f62a87932e8e20fd93a272e71b46d037ba2da811bb
-
Size
309KB
-
MD5
b2b9a4e71fbf991069cb34f62ebb8165
-
SHA1
02187bca676ec0ae002d60fb7d1a63174fd0cfec
-
SHA256
e975e654edd187a2be4af3f62a87932e8e20fd93a272e71b46d037ba2da811bb
-
SHA512
05a1ecda26cc16a0f1904018ee71f6840ffb08d179cfb99ca2e098756872523d0e336a210fc13a06a968a0213a3cdee09216ffaa156e35de5f915f867e1ca7ad
-
SSDEEP
6144:zZ3w8JnwPd8uBh5TIFIMG5T7SWLsld7SbfpghDBYg3gwwn4ovbsLu7/EmDaK3:zZ7FwP/LtIFIM+SWIPLBYqovbsLu77W
Malware Config
Signatures
Files
-
e975e654edd187a2be4af3f62a87932e8e20fd93a272e71b46d037ba2da811bb.exe windows x86
bb75d4aee81f432eb66fc782755d8323
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumePathNameA
GetCurrentThreadId
GetFileAttributesA
VirtualProtect
DeleteFileW
InterlockedExchange
FindAtomA
GetConsoleMode
GetDriveTypeW
GetProcessHeap
GetModuleFileNameA
GlobalFlags
GetModuleHandleA
CreateFileW
PulseEvent
SetFilePointer
DeleteFileW
OpenMutexA
CreateDirectoryA
GetFileTime
LocalFree
LeaveCriticalSection
HeapDestroy
OpenEventA
CreateFileW
user32
GetWindowLongA
GetWindowDC
GetSysColor
LoadCursorA
DispatchMessageA
GetKeyState
wsprintfA
GetWindowLongA
IsWindowEnabled
PeekMessageA
GetWindowTextA
IsZoomed
MessageBoxA
dfsshlex
DllCanUnloadNow
DllUnregisterServer
DllGetClassObject
DllRegisterServer
advapi32
IsValidSid
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 298KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE