Static task
static1
Behavioral task
behavioral1
Sample
e8ab437c6629415df4300f68ca07850f9a4686410565a4f8f4075c00cb0b7bc9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e8ab437c6629415df4300f68ca07850f9a4686410565a4f8f4075c00cb0b7bc9.exe
Resource
win10v2004-20220812-en
General
-
Target
e8ab437c6629415df4300f68ca07850f9a4686410565a4f8f4075c00cb0b7bc9
-
Size
57KB
-
MD5
70065af67736e882f8935840df4e4068
-
SHA1
969dd9838c0c4fdc01d1f81c6c0575899e6eb541
-
SHA256
e8ab437c6629415df4300f68ca07850f9a4686410565a4f8f4075c00cb0b7bc9
-
SHA512
9afdcd98f85ea2eaa92836c8ec3c3308f38239144c3fd20b607d145d768d887533d4b8c74ee04f60076b0d77078bdf0fc9813559953164a4a742c16a6506ba76
-
SSDEEP
768:lgC+FAL/JYsVkIk03+9fsZfVfj9ANIcn4jHcgKJO4X6IGOLOL6y6:mCBxLCb69BcIDwcWP
Malware Config
Signatures
Files
-
e8ab437c6629415df4300f68ca07850f9a4686410565a4f8f4075c00cb0b7bc9.exe windows x86
c472f8eef5ee522c4795dee348bce5a6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
SetUnhandledExceptionFilter
lstrlenW
EnumDateFormatsW
GetModuleHandleA
SetProcessWorkingSetSize
user32
MessageBoxA
gdi32
FlattenPath
psapi
QueryWorkingSet
Sections
w Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
3 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
w Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
w Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
w Size: 2KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dP9 Size: 130KB - Virtual size: 128KB
IMAGE_SCN_MEM_READ
iql Size: 320KB - Virtual size: 320KB
IMAGE_SCN_MEM_READ