Static task
static1
Behavioral task
behavioral1
Sample
e824ccbf3c1cf36c216bff2a189561c44d554477ee9660950506fd1dfecdb3a9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e824ccbf3c1cf36c216bff2a189561c44d554477ee9660950506fd1dfecdb3a9.exe
Resource
win10v2004-20220901-en
General
-
Target
e824ccbf3c1cf36c216bff2a189561c44d554477ee9660950506fd1dfecdb3a9
-
Size
105KB
-
MD5
6774fee8c705e933ac3c7dfbfa02b4e5
-
SHA1
20ddc96513486562f8bbc1d07624604ae6795ae4
-
SHA256
e824ccbf3c1cf36c216bff2a189561c44d554477ee9660950506fd1dfecdb3a9
-
SHA512
1b47a2f2679815beb5fa7f0d6fcda48bd4a760b163a5adea35cfdb4c672c2ec45a665cc976e79c812346e41a640e9c4c31ea7c883720ba2b7ca4eb1702ccaedf
-
SSDEEP
3072:X1ZwIa2yuMR2ZfKz9x/rtXFX0tfL9qZpGTsn8eD+:XTyuKyfY3/NFXCLsZ+
Malware Config
Signatures
Files
-
e824ccbf3c1cf36c216bff2a189561c44d554477ee9660950506fd1dfecdb3a9.exe windows x86
917738a607b5641a2495ec84d62b3985
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTimeAsFileTime
LoadResource
LCMapStringA
SetFileTime
GetThreadLocale
IsBadReadPtr
EnumCalendarInfoA
MulDiv
GetModuleHandleA
RaiseException
GlobalUnlock
GetTempPathA
DeleteFileA
GetDiskFreeSpaceA
SizeofResource
DeleteFileW
RtlMoveMemory
SetErrorMode
lstrlenA
GetUserDefaultLCID
GetCommandLineA
GetCurrentProcessId
GetLastError
GetStringTypeA
GetCurrentThread
GetProcAddress
VirtualProtect
WritePrivateProfileStringA
msvcrt
__p__fmode
_XcptFilter
__getmainargs
tan
_adjust_fdiv
_except_handler3
__p___initenv
_exit
__p__commode
_controlfp
__set_app_type
_initterm
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Qyad Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ