Static task
static1
Behavioral task
behavioral1
Sample
e258553823d26c8f67ad9cbf0627db0917f7f70b24c9a5be3858b66915d80a47.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e258553823d26c8f67ad9cbf0627db0917f7f70b24c9a5be3858b66915d80a47.exe
Resource
win10v2004-20220812-en
General
-
Target
e258553823d26c8f67ad9cbf0627db0917f7f70b24c9a5be3858b66915d80a47
-
Size
300KB
-
MD5
71ea18cdcbb372938bcae794b950b560
-
SHA1
f817bfe46ea6124bf724aab56a3ee77fccf334fb
-
SHA256
e258553823d26c8f67ad9cbf0627db0917f7f70b24c9a5be3858b66915d80a47
-
SHA512
5a6aa63f2d5187d3d09a8613957cfb9f3a267b0e0a6f0a67cff472477cf8d393aa2d34a877bdfe2f09a184c22bb5892edd71c2e41073d62f239193c8fb86f5bd
-
SSDEEP
6144:aVGWQql8pSbuV8LMzUYc9CK1PouHmrX9xxpMEPepeOSVPlQI:az5c4USN1/RhGr7xYZS
Malware Config
Signatures
Files
-
e258553823d26c8f67ad9cbf0627db0917f7f70b24c9a5be3858b66915d80a47.exe windows x86
e107f01eccdc2c9883aa93c5fffbe9a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetPriorityClass
GetModuleHandleA
GetFileAttributesA
lstrlenW
lstrcpyW
IsBadStringPtrA
FindResourceA
IsValidLocale
GetStartupInfoA
GetLastError
WriteConsoleW
HeapCreate
GetFileSize
GetFileTime
GetCurrentDirectoryA
CloseHandle
WriteConsoleW
WriteConsoleW
ReadFile
ReleaseMutex
IsBadCodePtr
msftedit
RichEditWndProc
RichListBoxWndProc
SetCustomTextOutHandlerEx
RichComboBoxWndProc
shell32
DuplicateIcon
StrChrA
DragQueryFileA
ShellMessageBoxA
ExtractIconA
SHGetFileInfoA
ShellAboutA
ShellMessageBoxA
SHGetSettings
SHGetMalloc
ShellAboutA
SHGetMalloc
DragAcceptFiles
msasn1
ASN1BERDecEoid
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 289KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 1024B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ