Static task
static1
Behavioral task
behavioral1
Sample
e95157b8a1917b15063be78ee4ab5a6dde0eb610a94bc4f52bc6c097fd571abf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e95157b8a1917b15063be78ee4ab5a6dde0eb610a94bc4f52bc6c097fd571abf.exe
Resource
win10v2004-20220901-en
General
-
Target
e95157b8a1917b15063be78ee4ab5a6dde0eb610a94bc4f52bc6c097fd571abf
-
Size
446KB
-
MD5
6836b714c03c8344de8aca6cef85e540
-
SHA1
13a13c4dc2e4c0d589ed929438cd2f2a708f1966
-
SHA256
e95157b8a1917b15063be78ee4ab5a6dde0eb610a94bc4f52bc6c097fd571abf
-
SHA512
0f744544094d6a943b0cc0d92ce44dd5c4d63eacb5ce6c1d0962369d509bd2187ac9a0cd78a2e92d30d824d85887a6dcf2f03c9284d26b6fe8966568ed1c5603
-
SSDEEP
12288:Ze/uQqiL1o9fdXn8Lr+gGiTSpSoQPoMrWm0O92GM+:gumxg3GxGtpSoQgM6NM
Malware Config
Signatures
Files
-
e95157b8a1917b15063be78ee4ab5a6dde0eb610a94bc4f52bc6c097fd571abf.exe windows x86
ced8cfb800a19a4a2a3dc1b7710e10f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwModifyBootEntry
oleaut32
VarR8FromDisp
kernel32
ReadConsoleOutputCharacterW
HeapSetInformation
user32
GetShellWindow
GetMessageExtraInfo
GetKBCodePage
Sections
.text Size: 439KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 335B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE