Static task
static1
Behavioral task
behavioral1
Sample
e7ff16ea1d250ad9ace558d5b137c00f047517ffedaaee775cd1ef5658b43cc4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e7ff16ea1d250ad9ace558d5b137c00f047517ffedaaee775cd1ef5658b43cc4.exe
Resource
win10v2004-20220812-en
General
-
Target
e7ff16ea1d250ad9ace558d5b137c00f047517ffedaaee775cd1ef5658b43cc4
-
Size
301KB
-
MD5
674d44023260319a682d45f86ad8f970
-
SHA1
8111b2f6c41983591ad3cffd0544b030080abf23
-
SHA256
e7ff16ea1d250ad9ace558d5b137c00f047517ffedaaee775cd1ef5658b43cc4
-
SHA512
556e141851028b62decdb5fdd8008f56f8b10110c160aca275c0530e69b562deea4c96e701d08ead96f16737b8bde5a594e31d951f36e16519549b794ca4f73d
-
SSDEEP
6144:kWn9airrpzMro+4TY+uBrM6VA+PXr9N1PsyxKOrlbMOaFtlhSRjcJy/53RinY:roStIrO8iIXrFvKOxbMO2hSREk
Malware Config
Signatures
Files
-
e7ff16ea1d250ad9ace558d5b137c00f047517ffedaaee775cd1ef5658b43cc4.exe windows x86
8e1189e79b07e7133326f7e8517ebf94
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentProcess
MapViewOfFile
GetLocaleInfoW
VirtualProtect
TlsGetValue
GetDriveTypeW
CreateDirectoryW
LocalLock
GetStringTypeA
FindClose
RemoveDirectoryW
GetExitCodeThread
GetFileAttributesA
IsBadWritePtr
GetModuleHandleA
IsValidCodePage
HeapFree
FindResourceW
SetLastError
GetFileAttributesA
GetTickCount
user32
DispatchMessageA
LoadStringA
IsDialogMessageA
LoadImageW
wsprintfW
PeekMessageW
GetWindowLongW
IsWindow
SetCursor
GetWindowTextW
LoadCursorA
PostMessageW
SetFocus
msctf
DllUnregisterServer
DllUnregisterServer
DllCanUnloadNow
TF_InitSystem
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE