?toggleMin@@YGKPA_K@Z
Static task
static1
Behavioral task
behavioral1
Sample
e5bc9777caa6829efc674bbd570bdeb3ba06172158ec7110d67591330bbe39e8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e5bc9777caa6829efc674bbd570bdeb3ba06172158ec7110d67591330bbe39e8.exe
Resource
win10v2004-20220812-en
General
-
Target
e5bc9777caa6829efc674bbd570bdeb3ba06172158ec7110d67591330bbe39e8
-
Size
310KB
-
MD5
fcb5d5a64ec77721c42106698c3747ae
-
SHA1
70c5ca63b6960aef1e613aa0aed63149d4303272
-
SHA256
e5bc9777caa6829efc674bbd570bdeb3ba06172158ec7110d67591330bbe39e8
-
SHA512
93e94f3e837b0bcc1087662fce2f1666a9c0233407d2255e9258ac805aca4b07ed18e4ad8f692b0792eeb8ff57792218d82afdb1e3d4079a4b30d7f6497503e8
-
SSDEEP
6144:axPuIdqYz6dXjtQPO/xy8J7HOZLmyoY9l2IQ6vXw:a8AmhhyIfdNOO0Xw
Malware Config
Signatures
Files
-
e5bc9777caa6829efc674bbd570bdeb3ba06172158ec7110d67591330bbe39e8.exe windows x86
187dd0057fb8294ed552b809a0788ee6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ord21
ExtractIconW
ord153
ord14
SHEmptyRecycleBinA
kernel32
GetConsoleScreenBufferInfo
FindFirstVolumeW
OpenFileMappingW
ResetEvent
EnumSystemCodePagesW
DefineDosDeviceW
FreeResource
lstrlenA
GetProfileIntW
lstrcpynA
DeleteVolumeMountPointA
GetComputerNameW
GetTickCount
GetPriorityClass
GetSystemWindowsDirectoryA
GetTimeFormatW
SetConsoleCursorPosition
GetBinaryTypeA
GetProfileIntA
GetLastError
user32
GetWindowThreadProcessId
mouse_event
SetWindowTextA
SendMessageTimeoutA
SystemParametersInfoW
FlashWindowEx
DrawStateA
WinHelpA
SetPropW
GetDoubleClickTime
CharPrevW
OemToCharBuffW
RemovePropA
AttachThreadInput
DrawIconEx
DrawTextA
PostQuitMessage
Exports
Exports
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 87B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 219KB - Virtual size: 218KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 1021B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ