Static task
static1
Behavioral task
behavioral1
Sample
e6a05397fb796720f678f638be6efef98a465dcc7ca5384a1adde791c996f005.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e6a05397fb796720f678f638be6efef98a465dcc7ca5384a1adde791c996f005.exe
Resource
win10v2004-20220812-en
General
-
Target
e6a05397fb796720f678f638be6efef98a465dcc7ca5384a1adde791c996f005
-
Size
301KB
-
MD5
60b46289ccbea1dbf0eb034485b9b6f7
-
SHA1
4a92964b38e2a176538eba1fd6910ff53e9b4836
-
SHA256
e6a05397fb796720f678f638be6efef98a465dcc7ca5384a1adde791c996f005
-
SHA512
a7fc9f22197456811d7bd6c50af04878a6b3c2a995402047451172d4265c637e9cc4e9fd2bc7c861220a0007640d848fd9a40a29c57eb009ed7018dca85ebdb0
-
SSDEEP
6144:WXcdfVbnlGW37saeXQUiuCKaWKXNIrDq9WJ:WXc/v7gXQUimKXNcq9WJ
Malware Config
Signatures
Files
-
e6a05397fb796720f678f638be6efef98a465dcc7ca5384a1adde791c996f005.exe windows x86
021722d1eeeff5efd38a4fc87941ca35
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteFileA
GetProcessHeap
HeapSize
SetLastError
ResetEvent
GetCommandLineA
GetFileAttributesA
WriteFile
RemoveDirectoryA
GetStdHandle
IsBadWritePtr
CancelIo
ReadConsoleW
CreateMailslotA
SetLocalTime
CreateDirectoryA
VirtualProtect
ReleaseMutex
GetModuleHandleA
GetLocaleInfoA
GetDriveTypeW
user32
PeekMessageA
SetFocus
DispatchMessageA
GetCaretPos
DrawIcon
GetWindowLongW
SetCursor
GetWindowTextW
PostMessageA
GetCapture
wsprintfA
LoadCursorA
DestroyMenu
filemgmt
DllRegisterServer
DllGetClassObject
DllUnregisterServer
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 452B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ