Static task
static1
Behavioral task
behavioral1
Sample
e745898abef01278f249ee846cc2cd67a139bce53c802fe15c1abcf23e67a875.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e745898abef01278f249ee846cc2cd67a139bce53c802fe15c1abcf23e67a875.exe
Resource
win10v2004-20220812-en
General
-
Target
e745898abef01278f249ee846cc2cd67a139bce53c802fe15c1abcf23e67a875
-
Size
40KB
-
MD5
3f6bb4d47cd8614978e7034031df2ce0
-
SHA1
189d42cbd80f915bbbc4d0410bd3c665d0b8de0f
-
SHA256
e745898abef01278f249ee846cc2cd67a139bce53c802fe15c1abcf23e67a875
-
SHA512
9abd803d907e876543b3e4c80bb708a9f0934d8bba5946b0c491334fcf6afdaa3043ee36a30bb4de88668f47f32aaf94efa753a3515f1f844ff70073b09e3edc
-
SSDEEP
768:sAepXOgB2+XzBzvGF31uXVxny9A3RO0tZHczhZebsPZJg6ljQ/x:Zep+gB2+XzF631SHwuHY6svg6pu
Malware Config
Signatures
Files
-
e745898abef01278f249ee846cc2cd67a139bce53c802fe15c1abcf23e67a875.exe windows x86
384819ea759dbabf702d9ccac58f7f3c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
_except_handler3
_cexit
_XcptFilter
_exit
_c_exit
setlocale
_wcsicmp
_wcsnicmp
wcstoul
_iob
vswprintf
exit
_controlfp
wcslen
vfwprintf
advapi32
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
kernel32
GetLastError
FormatMessageW
LocalFree
ProcessIdToSessionId
GetFileType
WriteConsoleW
GetCurrentProcessId
GetModuleHandleA
LocalAlloc
GetStdHandle
rpcrt4
NdrClientCall2
user32
wsprintfW
sfc_os
ord4
ord6
ord3
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qpgifjo Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE