Static task
static1
Behavioral task
behavioral1
Sample
0e1b83c4d588c076e830c3da76b0221094018dc9ec7ad162db6ce9f2f9904159.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0e1b83c4d588c076e830c3da76b0221094018dc9ec7ad162db6ce9f2f9904159.exe
Resource
win10v2004-20220901-en
General
-
Target
0e1b83c4d588c076e830c3da76b0221094018dc9ec7ad162db6ce9f2f9904159
-
Size
19KB
-
MD5
34f4df6e244aa93e242379f4fca0fec0
-
SHA1
476504be21f8f8611f0f90674db8772e6a36e1a9
-
SHA256
0e1b83c4d588c076e830c3da76b0221094018dc9ec7ad162db6ce9f2f9904159
-
SHA512
8ec3f3162b85085472ca6ae7c5baf4b4418d3f4d20c3a3681aee6094ca7d9ab6cef561a5ecb8322dcfa8b1b67af374db59c3814b39248b406e960f4e3e07b2cc
-
SSDEEP
384:V+EyTn3Vhj859A4oYOWaWV20WhyO3PlY6XRK5Wy4MU4o1Kx2:V+E23z8doTA2TZPlnRK/YQ4
Malware Config
Signatures
Files
-
0e1b83c4d588c076e830c3da76b0221094018dc9ec7ad162db6ce9f2f9904159.exe windows x86
83ac3435ce75a7addd17a1fe2144a37d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageA
TranslateMessage
DispatchMessageA
LoadStringA
GetActiveWindow
MessageBoxA
LoadCursorA
RegisterClassA
GetDC
ReleaseDC
RegisterWindowMessageA
IsRectEmpty
GetSystemMetrics
CreateWindowExA
SetCursor
PostQuitMessage
GetCursorPos
PostMessageA
DefWindowProcA
gdi32
GetClipBox
GetStockObject
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
exit
_cexit
_XcptFilter
_exit
_c_exit
strchr
atoi
__initenv
kernel32
OpenFile
GetVersionExA
GetModuleHandleA
GetCommandLineA
QueryPerformanceCounter
GetTickCount
LoadLibraryA
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcAddress
GetCurrentThreadId
FreeLibrary
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 692B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE