Static task
static1
Behavioral task
behavioral1
Sample
e568341786eaebf416ffc4ac624b229c52c18e052a26c53c5558f881b1464632.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e568341786eaebf416ffc4ac624b229c52c18e052a26c53c5558f881b1464632.exe
Resource
win10v2004-20220901-en
General
-
Target
e568341786eaebf416ffc4ac624b229c52c18e052a26c53c5558f881b1464632
-
Size
246KB
-
MD5
00bdb8fd43655d9ccb1de3404a97091b
-
SHA1
80015e3cea4df03fb3b6e44f0ce739fab140ff81
-
SHA256
e568341786eaebf416ffc4ac624b229c52c18e052a26c53c5558f881b1464632
-
SHA512
e7aafd778f9fb2cbd99dfb53c1b13c6421b5fa693761a5263928df5bcb25e338f16684f1852bf036cd6c01773fa1428995874497555f99e8baa0966caae949fc
-
SSDEEP
3072:JOGhGc5J4b15uN2O3dy8PSkUgvdPb2YaWBonFBF0yWyUHo5lrFk38TYPT2ZVVrru:J9oEN2mw8fLA4Gw56Fks0a9+6eB1DRo
Malware Config
Signatures
Files
-
e568341786eaebf416ffc4ac624b229c52c18e052a26c53c5558f881b1464632.exe windows x86
d144df52c8fd7d2de3b0d204bc8368cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCreateKeyExA
RegDeleteValueA
RegEnumKeyExA
RegDeleteKeyA
kernel32
GetCommandLineA
LoadLibraryA
GetLastError
HeapDestroy
GetModuleHandleA
GetOEMCP
GetVersionExA
LoadLibraryExA
VirtualAlloc
ExitThread
GetModuleHandleW
GetProcAddress
lstrlenA
lstrlenW
CompareStringA
GetACP
FormatMessageA
GetCommandLineW
lstrcatA
comctl32
ImageList_Write
ImageList_Draw
ImageList_Read
shell32
DragQueryFileA
SHGetFileInfoA
Shell_NotifyIconA
version
GetFileVersionInfoA
ole32
CoReleaseMarshalData
StgCreateDocfileOnILockBytes
CoCreateInstanceEx
CreateBindCtx
OleRun
ReleaseStgMedium
CreateOleAdviseHolder
StringFromIID
OleCreateStaticFromData
CoFreeUnusedLibraries
Sections
.text Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1007B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gdata Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ