Static task
static1
Behavioral task
behavioral1
Sample
e29f2d495149012784b883f0d732d6a6504d117cca3164e8929ffb89ad546942.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e29f2d495149012784b883f0d732d6a6504d117cca3164e8929ffb89ad546942.exe
Resource
win10v2004-20220812-en
General
-
Target
e29f2d495149012784b883f0d732d6a6504d117cca3164e8929ffb89ad546942
-
Size
144KB
-
MD5
649b8c838ee7f98350ebd478d2b0ed58
-
SHA1
bb43c213d1be5bf9cc487e8167ad65687b18d71a
-
SHA256
e29f2d495149012784b883f0d732d6a6504d117cca3164e8929ffb89ad546942
-
SHA512
a3395a2f60275edcb6d67ef61343e300b5a3c34cbdf3c4273174540ce13add5a3130aa76f7ac75893bc4110c906bd182014bc82ab8d365e940533922fc0f5618
-
SSDEEP
3072:Mu8o0av5My1dvwY0AHs2qmRlixXaKa0qMW2pVol3IFEyKwLR:t0e5MKdvwYh/wguJpVopIh
Malware Config
Signatures
Files
-
e29f2d495149012784b883f0d732d6a6504d117cca3164e8929ffb89ad546942.exe windows x86
57e276e27942a67057c25316c50286b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleHardwareState
RegisterConsoleIME
DebugActiveProcess
BaseCleanupAppcompatCacheSupport
FindFirstChangeNotificationA
RtlCaptureContext
CreateHardLinkW
GetCurrencyFormatA
SetConsoleWindowInfo
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE