Static task
static1
Behavioral task
behavioral1
Sample
0e5b1a113b6002fae5bc1355c28058f0cdd9c6b080ba459f786a606bed6513bf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0e5b1a113b6002fae5bc1355c28058f0cdd9c6b080ba459f786a606bed6513bf.exe
Resource
win10v2004-20220812-en
General
-
Target
0e5b1a113b6002fae5bc1355c28058f0cdd9c6b080ba459f786a606bed6513bf
-
Size
167KB
-
MD5
ed5862c8e99f708b3e8fa1d6503b37eb
-
SHA1
e195841cdd955a10d061a339ff9ee332130f689b
-
SHA256
0e5b1a113b6002fae5bc1355c28058f0cdd9c6b080ba459f786a606bed6513bf
-
SHA512
f4e7c76e390bb9d5a2ca864329f8a046e752db56e18f3bdc8adb44adebb63af54f15cc78a3cb39afa7b40992fcd990073085cf86faa6f3b5d52fbf0179f93a9a
-
SSDEEP
3072:on/k9vxmEfftCNi5ipR8RlS7HLJLMQt7LAvYD:U/zEHtz5lRWrJLvtfC
Malware Config
Signatures
Files
-
0e5b1a113b6002fae5bc1355c28058f0cdd9c6b080ba459f786a606bed6513bf.exe windows x86
fe8252d03fff1de291053ad672e3959e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
LoadLibraryW
GetLastError
LoadLibraryA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 628B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.11 Size: 512B - Virtual size: 7B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.22 Size: 512B - Virtual size: 7B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.33 Size: 512B - Virtual size: 7B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.44 Size: 512B - Virtual size: 7B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55 Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data4 Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 858B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ