Static task
static1
Behavioral task
behavioral1
Sample
e765d6df592f7410231ec466bc4f0e7a281b1ec9369b9c18d8211566de8f77f9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e765d6df592f7410231ec466bc4f0e7a281b1ec9369b9c18d8211566de8f77f9.exe
Resource
win10v2004-20220812-en
General
-
Target
e765d6df592f7410231ec466bc4f0e7a281b1ec9369b9c18d8211566de8f77f9
-
Size
29KB
-
MD5
08a30feb7c0d98d0d13897ab354f3890
-
SHA1
258f0e233d5e7f38cbfa2cf0f3de2dcca0f4f354
-
SHA256
e765d6df592f7410231ec466bc4f0e7a281b1ec9369b9c18d8211566de8f77f9
-
SHA512
127b223dd0e7eeeea425b1c4a5b3b9aa5015c174f23f5749062c6366ade29e99e375fa2da932c3d1a35ac747ba04f5bb485b8ec5f68cb19ee1a97ab54e3e9c9f
-
SSDEEP
768:XVSWXY2YTcoJynfKcP0Me4nMk0/s5fhwsKdpD:XHN8yfKcP000/FXdp
Malware Config
Signatures
Files
-
e765d6df592f7410231ec466bc4f0e7a281b1ec9369b9c18d8211566de8f77f9.exe windows x86
f4bb95a2ed29767e199a8a83e34ea89d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
ExitProcess
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
user32
FindWindowW
PostMessageW
shell32
SHLoadInProc
Sections
.text Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xchtlfy Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE