Static task
static1
Behavioral task
behavioral1
Sample
e633dea2a4930bce47fb0b9991f210430643eb1b044548c9dcff98142716528e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e633dea2a4930bce47fb0b9991f210430643eb1b044548c9dcff98142716528e.exe
Resource
win10v2004-20220812-en
General
-
Target
e633dea2a4930bce47fb0b9991f210430643eb1b044548c9dcff98142716528e
-
Size
810KB
-
MD5
6b85e892d39aec327dce894f4dc68580
-
SHA1
1ffa06f00292bd6da11e9520efa1cc050ed354b1
-
SHA256
e633dea2a4930bce47fb0b9991f210430643eb1b044548c9dcff98142716528e
-
SHA512
d8ddcd2a2416b87d9d5ec64e32622adadfd04c4172732ac6001f59a4f177ce305440deeb50cddc3b1e8e64411e480c78968ee52664abfcbac2d092ca8f817d41
-
SSDEEP
12288:p4NZp1wcRu5BqeLpmEQG3pcVKPSnnWhjtVALDPGrDYbWGdKW/zUnDV3BWAyc3/2n:yFmHBFmER3pksALDzVpzUn/Mw/2Q
Malware Config
Signatures
Files
-
e633dea2a4930bce47fb0b9991f210430643eb1b044548c9dcff98142716528e.exe windows x86
8a9f0ef0d9147551811a517ebf5a61d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetStdHandle
GetLogicalDrives
GetStringTypeA
GetLogicalDrives
GetLogicalDrives
GetFileAttributesA
CreateEventA
GetModuleHandleW
SetCurrentDirectoryW
VirtualProtectEx
GetLogicalDrives
GetLogicalDriveStringsW
GetTickCount
OpenMutexA
lstrcpyW
riched20
RichEdit10ANSIWndProc
IID_ITextHost
RichEditANSIWndProc
IID_IRichEditOle
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.kdata Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ