Static task
static1
Behavioral task
behavioral1
Sample
e0bf4fc14b902bb01603ef34efb57e0a5c0d1e4b4c1e2496156628b42ac41c31.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e0bf4fc14b902bb01603ef34efb57e0a5c0d1e4b4c1e2496156628b42ac41c31.exe
Resource
win10v2004-20220901-en
General
-
Target
e0bf4fc14b902bb01603ef34efb57e0a5c0d1e4b4c1e2496156628b42ac41c31
-
Size
113KB
-
MD5
656c4f00591a75630c2638834ca18bc0
-
SHA1
c529c68f0be5e3b88049acbb401e188f80b3b730
-
SHA256
e0bf4fc14b902bb01603ef34efb57e0a5c0d1e4b4c1e2496156628b42ac41c31
-
SHA512
37ec487adf6d5248ed8be0c80f2ee5752fa0178e7b811b0a7f363fc9446d5578e10207f92840a3dc8bb76d0c01dca247dd3169cee45f8fbea2db74fccc80dea0
-
SSDEEP
3072:eWmBc6nAkN+krNloyCCelFYcw+oImR8o9H:e/pnlN5rNCcelF2VX
Malware Config
Signatures
Files
-
e0bf4fc14b902bb01603ef34efb57e0a5c0d1e4b4c1e2496156628b42ac41c31.exe windows x86
5ca0ec5fbc4327561be0bae6d45ea6de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrlenW
WriteConsoleW
DisconnectNamedPipe
WriteConsoleW
GetLastError
GetPriorityClass
lstrcpyW
GetFileAttributesA
SetEvent
ClearCommBreak
CopyFileW
GetStartupInfoA
GetStdHandle
CloseHandle
IsDebuggerPresent
GetCurrentDirectoryA
CreatePipe
GetModuleHandleA
WriteConsoleW
HeapCreate
SuspendThread
msftedit
SetCustomTextOutHandlerEx
RichEditWndProc
RichListBoxWndProc
RichComboBoxWndProc
shell32
ShellAboutA
SHGetSettings
SHGetMalloc
DllUnregisterServer
DragAcceptFiles
DragFinish
StrChrA
SHGetDiskFreeSpaceA
DragQueryFileA
SHFree
DuplicateIcon
ExtractIconA
ShellMessageBoxA
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ