e70bd890b39dd377d51a93174ec986156580f5ecf23574b96cc283db33668d22 | Triage

Submit
Reports

Overview

overview

8

Static

static

e70bd890b3...22.exe

windows7-x64

8

e70bd890b3...22.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

e70bd890b39dd377d51a93174ec986156580f5ecf23574b96cc283db33668d22.exe

Resource

win7-20220901-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

e70bd890b39dd377d51a93174ec986156580f5ecf23574b96cc283db33668d22.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

3 signatures

150 seconds

General

Target

e70bd890b39dd377d51a93174ec986156580f5ecf23574b96cc283db33668d22
Size

575KB
MD5

697e7f9d48dc1755551987334c952940
SHA1

4c6ab7fa92738a6f225ad1c86e2393db27f850e3
SHA256

e70bd890b39dd377d51a93174ec986156580f5ecf23574b96cc283db33668d22
SHA512

560a0b8e16ab9b8246406abdecd34733e2dae09cab76c4f6b00718dd433db9e3cf266b883fd15f1a3a11711d9ab02de1fcc062b29d1b4caf1019f062a8aaf3bf
SSDEEP

12288:MgSxFMiYmVAviv5Z8nt1UkAthdYAH206qODyveQ/iTk5Ac0r:Mg0FlDVA7t1UkArdYAWz8R/xAF

Score

N/A

Malware Config

Signatures

Files

e70bd890b39dd377d51a93174ec986156580f5ecf23574b96cc283db33668d22
.exe windows x86

91b9d16df63fda33e0171a72162c99e4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptBinaryToStringW

kernel32

GetLastError
GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
GetModuleHandleW

user32

GetWindow

shlwapi

PathAppendA
PathAppendW

crtdll

__GetMainArgs
exit
raise
signal

ulib

?Strcat@WSTRING@@QAEEPBV1@@Z
??0DSTRING@@QAE@XZ
??0STRING_ARGUMENT@@QAE@XZ
??0ARRAY@@QAE@XZ
??0ARGUMENT_LEXEMIZER@@QAE@XZ
??0FLAG_ARGUMENT@@QAE@XZ
?Initialize@ARRAY@@QAEEKK@Z
?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z
?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 292B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

© 2018-2025

Terms | Privacy