Static task
static1
Behavioral task
behavioral1
Sample
e279f219dd7550b63cacd1e6fea8016ff325db5a0f9c7f1f66a57d545ae44080.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e279f219dd7550b63cacd1e6fea8016ff325db5a0f9c7f1f66a57d545ae44080.exe
Resource
win10v2004-20220812-en
General
-
Target
e279f219dd7550b63cacd1e6fea8016ff325db5a0f9c7f1f66a57d545ae44080
-
Size
655KB
-
MD5
6d4d9bf5a771478c98adff6bc1f8de30
-
SHA1
05a294c8f80bcc44da5a50d9d388b09e22f3d85e
-
SHA256
e279f219dd7550b63cacd1e6fea8016ff325db5a0f9c7f1f66a57d545ae44080
-
SHA512
c7ac5b91654d9173cb7cabb64b8e717f69f109a7c8b52746cc63b6fad2d3e007eb67af49849f0698972c10da94390daac8e91cfbef9ed072dfa41942525de17d
-
SSDEEP
12288:0FrmRgot0jN+HLdgoA1Zn8x8PzenT/coO1Lxclv+q/Jtf2miHmJhahx:0lQjLObPSTf6qRtO4JhEx
Malware Config
Signatures
Files
-
e279f219dd7550b63cacd1e6fea8016ff325db5a0f9c7f1f66a57d545ae44080.exe windows x86
a6bc0fe1911f36f6568d7b37bf491a98
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtTraceEvent
RtlCaptureStackContext
user32
GetActiveWindow
GetCapture
kernel32
GetSystemDefaultLCID
Sections
.text Size: 648KB - Virtual size: 648KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 286B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE