Static task
static1
Behavioral task
behavioral1
Sample
0e8f893433e9a493748e5488466446890b3ecf44ee388342ca798590bdcca584.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0e8f893433e9a493748e5488466446890b3ecf44ee388342ca798590bdcca584.exe
Resource
win10v2004-20220901-en
General
-
Target
0e8f893433e9a493748e5488466446890b3ecf44ee388342ca798590bdcca584
-
Size
4.5MB
-
MD5
5c4ae8b2460d5d8bdb97bc28bd769f23
-
SHA1
8c963b9e45aaf9f0dee390c28803e4e6b81f452d
-
SHA256
0e8f893433e9a493748e5488466446890b3ecf44ee388342ca798590bdcca584
-
SHA512
5eedb07293b9e21ff35792c410c8e00550cdbc49e28b0abb105a7530fb6a5a245836fcb613bd1fecfe9e5d06a5c05b1cfc963a0633997ab21a53de20f2a67ca4
-
SSDEEP
98304:xeFGkEaQpCx+L6OkBCNhQ3eFMgZRRIN7xtr:TIxE8CNh/JRRU
Malware Config
Signatures
Files
-
0e8f893433e9a493748e5488466446890b3ecf44ee388342ca798590bdcca584.exe windows x86
65f41ef27a6c447a2aa758910ecf43fc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
OpenProcess
LocalReAlloc
lstrlenW
GetProcAddress
GetCurrentThread
GetModuleHandleA
EnumDateFormatsW
GetCurrentThreadId
GetCurrentProcessId
LocalFlags
GetCurrentProcess
GlobalFree
SetUnhandledExceptionFilter
advapi32
SetKernelObjectSecurity
ntdll
RtlAddVectoredExceptionHandler
RtlRemoveVectoredExceptionHandler
Sections
G Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
L Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
G Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
G Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
G Size: 2KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pwd Size: 130KB - Virtual size: 128KB
IMAGE_SCN_MEM_READ
NHM Size: 194KB - Virtual size: 192KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Es2 Size: 194KB - Virtual size: 192KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Riw Size: 194KB - Virtual size: 192KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uUO Size: 194KB - Virtual size: 192KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4d3 Size: 194KB - Virtual size: 192KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
93f Size: 194KB - Virtual size: 192KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE