Static task
static1
Behavioral task
behavioral1
Sample
e40afc1ed599a68e879993d43cb6a8594869e75fd4a75c6fbed4bac235235957.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e40afc1ed599a68e879993d43cb6a8594869e75fd4a75c6fbed4bac235235957.exe
Resource
win10v2004-20220812-en
General
-
Target
e40afc1ed599a68e879993d43cb6a8594869e75fd4a75c6fbed4bac235235957
-
Size
10KB
-
MD5
0a105162950ff2a2d55ecf852a740b40
-
SHA1
521620a7d869c93c355fd3f3d04cce739c3e7925
-
SHA256
e40afc1ed599a68e879993d43cb6a8594869e75fd4a75c6fbed4bac235235957
-
SHA512
030124e3ea69015697ea7b669527a174c5db138ab5f1c98b82f7e0553dcbd238d20119d1e49098d74ee1cffa6edb87d7cbb60e7d97f560373598f33e5d9515e7
-
SSDEEP
192:yMKqx/fzZDihldQu6lu4Bm2R1jc0mbmkb299P1oynhhuK5Yff9pX/FCZZc:Wq1fzZDihldr63DH9p1LB5Yff9pIZZ
Malware Config
Signatures
Files
-
e40afc1ed599a68e879993d43cb6a8594869e75fd4a75c6fbed4bac235235957.exe windows x86
81b6358507c769a6ca2f59bd536b62b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
free
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
realloc
time
srand
strncpy
memmove
malloc
_stricmp
kernel32
SetErrorMode
GetStartupInfoA
FreeLibrary
HeapFree
IsBadReadPtr
LoadLibraryA
VirtualFree
VirtualProtect
VirtualAlloc
GetProcessHeap
HeapAlloc
GetCurrentProcessId
OpenMutexA
CreateMutexA
Sleep
GlobalFree
GlobalAlloc
CreateThread
GetModuleHandleA
GetProcAddress
OpenProcess
CloseHandle
user32
DefWindowProcA
UpdateWindow
ShowWindow
SetWindowPos
LoadCursorA
GetSystemMetrics
DispatchMessageA
TranslateMessage
GetMessageA
RegisterClassExA
PostMessageA
CreateWindowExA
psapi
EnumProcessModules
GetModuleFileNameExA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ