Static task
static1
Behavioral task
behavioral1
Sample
e5069e1337c5fad79c87c68e6a49ff63bb10db71861c1898cae66213ee57461c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e5069e1337c5fad79c87c68e6a49ff63bb10db71861c1898cae66213ee57461c.exe
Resource
win10v2004-20220812-en
General
-
Target
e5069e1337c5fad79c87c68e6a49ff63bb10db71861c1898cae66213ee57461c
-
Size
7KB
-
MD5
690f437581d5d63a09a5232d5a5ba7b0
-
SHA1
ff822b63afb6c74603002fd12a946dc14eecde31
-
SHA256
e5069e1337c5fad79c87c68e6a49ff63bb10db71861c1898cae66213ee57461c
-
SHA512
fd421b898842d56d64d572a6ac3d2278c33358cb79df4e1a939f2c99ba3c759dcc07d637045e4a4e0a55b86ad23cec52e11b719ddbcf7178eb0ceefee8ceffe3
-
SSDEEP
24:7pVs77+ym5Y63ZZ+aXdcCkEF2vIyvIs+i4BsRvkc5X3aUlesI2pG+H3:9O2q6JZ+31ERbs+i4Bwvke68esI2b
Malware Config
Signatures
Files
-
e5069e1337c5fad79c87c68e6a49ff63bb10db71861c1898cae66213ee57461c.exe windows x86
0e4021554a373d5cb9215de2f75bd91d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadProcessMemory
WriteProcessMemory
TerminateProcess
ExitProcess
GetStartupInfoA
CreateProcessA
GetCommandLineA
GetCurrentProcess
ResumeThread
GetThreadContext
user32
MessageBoxA
Sections
code Size: 322B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 220B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMPORTS Size: 66B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
imports Size: 392B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
relocs Size: 114B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resource Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ