Static task
static1
Behavioral task
behavioral1
Sample
e41e41674f8ad23a47c79abc8ed4329b064dda7549e2ed45424ccbdbee97d1de.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e41e41674f8ad23a47c79abc8ed4329b064dda7549e2ed45424ccbdbee97d1de.exe
Resource
win10v2004-20220812-en
General
-
Target
e41e41674f8ad23a47c79abc8ed4329b064dda7549e2ed45424ccbdbee97d1de
-
Size
284KB
-
MD5
03c00831b2b5c953fa1a4f717bcfa680
-
SHA1
03b4070de962c834dc8dce0e8721bc7a111a941a
-
SHA256
e41e41674f8ad23a47c79abc8ed4329b064dda7549e2ed45424ccbdbee97d1de
-
SHA512
aceaf6eb573e47f93960fc2a1310b83830c2a21e6b9fc0139a3ad9780d1021967b7b8279053aba14c26e4770cda49ceeee165742f8600e290751a656632f8200
-
SSDEEP
6144:Rd64/T+QtQdoosT4DFZ6F1Do2WRerNcRNH9ndMdA7/56j9Evnnh54:R44/SdzU8FauReriH9ndMde/nh54
Malware Config
Signatures
Files
-
e41e41674f8ad23a47c79abc8ed4329b064dda7549e2ed45424ccbdbee97d1de.exe windows x86
de439006950f6f57ca79e177cf897923
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
w32topl
ToplScheduleDuration
ToplSTHeapDestroy
ToplScheduleCreate
ToplScheduleCacheDestroy
ToplSTHeapInit
ToplScheduleExportReadonly
ToplScheduleCacheCreate
ToplSTHeapExtractMin
kernel32
SystemTimeToFileTime
GetSystemTimeAsFileTime
GetCurrentProcess
lstrcpyW
CloseHandle
GetLocaleInfoW
WideCharToMultiByte
HeapAlloc
MultiByteToWideChar
GetCurrentProcessId
LoadLibraryA
SetUnhandledExceptionFilter
CreateFileA
GetOEMCP
lstrcmpA
GetProcessHeap
GetTickCount
QueryPerformanceCounter
FindResourceW
GetLocalTime
SetLastError
HeapFree
fmifs
Format
Chkdsk
ComputeFmMediaType
EnableVolumeCompression
FormatEx
DiskCopy
Extend
Sections
.text Size: 270KB - Virtual size: 301KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.isdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ