Static task
static1
Behavioral task
behavioral1
Sample
e1c14394f6eb3cc7da5fee14e5b79232f54e7aeba39a7175005b3800f1ee8ace.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e1c14394f6eb3cc7da5fee14e5b79232f54e7aeba39a7175005b3800f1ee8ace.exe
Resource
win10v2004-20220812-en
General
-
Target
e1c14394f6eb3cc7da5fee14e5b79232f54e7aeba39a7175005b3800f1ee8ace
-
Size
112KB
-
MD5
4f6f6a2ea0c0dcaa9d744259159d0a7a
-
SHA1
9ee7ef343c8eee3f6bb5d3f36d4d19dc5790357e
-
SHA256
e1c14394f6eb3cc7da5fee14e5b79232f54e7aeba39a7175005b3800f1ee8ace
-
SHA512
c259117d26d70108807fcc5735b87f15968e1a1b12f3ee20948126832cd149076369ad4bb02e8dc23e95bc6344acc76f2e6b2b93e515c763cfe087e3e0476948
-
SSDEEP
1536:j31wuuYIXYfpnMAATzpv6HzGsBgiG06Kr2dYbaT0asrnny5JIExmHc1k6Z:r1wuuYIXrTV0zGsOE9IMby55Ykk6Z
Malware Config
Signatures
Files
-
e1c14394f6eb3cc7da5fee14e5b79232f54e7aeba39a7175005b3800f1ee8ace.exe windows x86
41900d0b60589d2d4a025587716e61a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
OutputDebugStringA
VirtualQuery
GetProcAddress
GetModuleHandleA
user32
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
MessageBoxA
CreateWindowExA
LoadCursorA
LoadIconA
ntdll
memcpy
_chkstk
ole32
CoUninitialize
gdi32
TextOutA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 774B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nss Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lss Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE