Static task
static1
Behavioral task
behavioral1
Sample
e9a480c52a540938699e30ba52e506e90370fe0a298ef0c8f5c22c98d23db7c3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e9a480c52a540938699e30ba52e506e90370fe0a298ef0c8f5c22c98d23db7c3.exe
Resource
win10v2004-20220812-en
General
-
Target
e9a480c52a540938699e30ba52e506e90370fe0a298ef0c8f5c22c98d23db7c3
-
Size
295KB
-
MD5
62d1f0581fd359175f7dca3e2ac33930
-
SHA1
97cecbf304d5d05182b581b502a00678d14c6322
-
SHA256
e9a480c52a540938699e30ba52e506e90370fe0a298ef0c8f5c22c98d23db7c3
-
SHA512
dba1080ca85440a49a74c2c82dacdc6fd8cb4d7606423228bd31a76acfcd8968def1cc50f69ecb482e3f183d89ca9e913d9059e673401bd1fe3e311a83c7f173
-
SSDEEP
6144:i+p8WekCUsQC+rnb4il6/sjmreyjnXD9W8ijt0OK1NV:/VhCUsf+whrpzA8s0nH
Malware Config
Signatures
Files
-
e9a480c52a540938699e30ba52e506e90370fe0a298ef0c8f5c22c98d23db7c3.exe windows x86
eed3abd0309cef04541a749aa3cbe558
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
w32topl
ToplScheduleExportReadonly
ToplSTHeapDestroy
ToplScheduleCreate
ToplScheduleCacheDestroy
ToplScheduleCacheCreate
ToplSTHeapInit
ToplSTHeapExtractMin
ToplScheduleDuration
kernel32
WideCharToMultiByte
LoadLibraryA
GetUserDefaultLCID
GetTickCount
SetUnhandledExceptionFilter
GetOEMCP
GetCurrentProcessId
CreateFileA
QueryPerformanceCounter
GetLocalTime
lstrcpyW
MultiByteToWideChar
GetCurrentProcess
CloseHandle
HeapAlloc
GetSystemTimeAsFileTime
SystemTimeToFileTime
GetProcessHeap
HeapFree
lstrcmpA
GetSystemDefaultLangID
SetLastError
fmifs
Format
Chkdsk
Extend
EnableVolumeCompression
DiskCopy
FormatEx
Sections
.text Size: 129KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.iata Size: 159KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ