Static task
static1
Behavioral task
behavioral1
Sample
e90820e18f627bdbcd8895a7566618cf41e25a1ba3d7cf659daff62f32cd0844.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e90820e18f627bdbcd8895a7566618cf41e25a1ba3d7cf659daff62f32cd0844.exe
Resource
win10v2004-20220812-en
General
-
Target
e90820e18f627bdbcd8895a7566618cf41e25a1ba3d7cf659daff62f32cd0844
-
Size
42KB
-
MD5
6a1b840d27565ec3bb3a4e8fb8377210
-
SHA1
f388265634d11ad7b6b19b5fc922eb01109bce2a
-
SHA256
e90820e18f627bdbcd8895a7566618cf41e25a1ba3d7cf659daff62f32cd0844
-
SHA512
81d7238f6124d7e56da4213f1802b5d6e02c30aa86ffac0797e806b50833988f3d68adfd11729d8f5877b131a3f51fd70ace534caa2517139d3d0ef5eb9bbbca
-
SSDEEP
384:LQN7O0YfrfVAmPY7fDMJy5uxiPfZNFaFPEBNsyAuNHqsX1GZI+x:UNcfVg7YJyJDaW/rn1GZI8
Malware Config
Signatures
Files
-
e90820e18f627bdbcd8895a7566618cf41e25a1ba3d7cf659daff62f32cd0844.exe windows x86
0c7eb98cf3aae8655011d52c3095f47f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
lstrlenW
AllocConsole
GetProcAddress
LoadLibraryA
ExitThread
ExitProcess
lstrcpyA
GetModuleHandleA
lstrcpyW
GetModuleHandleW
GetModuleFileNameA
lstrcpynA
GetModuleFileNameW
lstrcpynW
FreeLibrary
FreeConsole
VirtualFree
VirtualProtect
RtlUnwind
Sections
PL Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 528B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ