Static task
static1
Behavioral task
behavioral1
Sample
e895a1721357ffe3606c26da065a0dc01bd8c306b1675ffc6ad1b19ee3256c69.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e895a1721357ffe3606c26da065a0dc01bd8c306b1675ffc6ad1b19ee3256c69.exe
Resource
win10v2004-20220812-en
General
-
Target
e895a1721357ffe3606c26da065a0dc01bd8c306b1675ffc6ad1b19ee3256c69
-
Size
496KB
-
MD5
506890a27886773197ad0fb3c171f240
-
SHA1
6ec1e7471b4be878b57d5c258b34bfd16b4e85e7
-
SHA256
e895a1721357ffe3606c26da065a0dc01bd8c306b1675ffc6ad1b19ee3256c69
-
SHA512
a6dbf74bbf2236c9193da68f0388b882703586fd4150b651bc0369deb97eade23d4b5d096951090f4417d3c2011755f89f7992c038c836e8d281525f3aded7e4
-
SSDEEP
12288:6J59yDUAPPDwUPAYuwrOfsjjnZbpoIWMk6:0Xnw+XV6
Malware Config
Signatures
Files
-
e895a1721357ffe3606c26da065a0dc01bd8c306b1675ffc6ad1b19ee3256c69.exe windows x86
f618904d4b3f06eef52b8e6894ff9ad2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
RemoveDirectoryW
GetProcAddress
LocalFree
GetWindowsDirectoryW
GetTickCount
LocalAlloc
GetCPInfo
VirtualFree
GetModuleHandleA
GetCurrentProcessId
WideCharToMultiByte
LoadLibraryA
FreeLibrary
MultiByteToWideChar
ExpandEnvironmentStringsW
GetLastError
msvcrt
_c_exit
_controlfp
__wgetmainargs
_stricmp
_XcptFilter
printf
_cexit
_adjust_fdiv
sprintf
wcscpy
strstr
_exit
_wcsicmp
__setusermatherr
_except_handler3
_initterm
__winitenv
__p__fmode
rasdlg
RasPhonebookDlgW
RasAutodialQueryDlgW
RasDialDlgW
advapi32
RegOpenKeyExW
RegQueryValueExA
RegCloseKey
tapi32
lineInitialize
lineGetTranslateCapsW
Sections
.safdwer Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 269KB - Virtual size: 269KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 344B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ