Static task
static1
Behavioral task
behavioral1
Sample
e1aac524f4c57b8a6198fe0b5eb0c65cbea05aacd93d35e404ab5b057d2d1fb6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e1aac524f4c57b8a6198fe0b5eb0c65cbea05aacd93d35e404ab5b057d2d1fb6.exe
Resource
win10v2004-20220812-en
General
-
Target
e1aac524f4c57b8a6198fe0b5eb0c65cbea05aacd93d35e404ab5b057d2d1fb6
-
Size
811KB
-
MD5
79739540d81ef81e4121d7a856d2e981
-
SHA1
309157a9c95e43dc5842231fdbd5b5ed46a56b80
-
SHA256
e1aac524f4c57b8a6198fe0b5eb0c65cbea05aacd93d35e404ab5b057d2d1fb6
-
SHA512
d1809781ba232c97eced76786d714b1bb28e63fc6811d9975546143426c1c358b3bd5dd1262a27691c657e9d0f38587dca2d4270402e7ce4c24a5145916a9edd
-
SSDEEP
24576:Mw5NJSg1MyTCNcZNBMCHqpiPAmWhz3XXkNiN:MAvB7HqIPQU0N
Malware Config
Signatures
Files
-
e1aac524f4c57b8a6198fe0b5eb0c65cbea05aacd93d35e404ab5b057d2d1fb6.exe windows x86
25d52e05a204cbecefd95e93df15ea73
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetCurrentDirectoryW
OpenMutexW
SetEndOfFile
SetEndOfFile
GetStringTypeW
SetEndOfFile
GetVersion
LoadLibraryA
VirtualProtectEx
lstrcpyW
GetStdHandle
GetFileAttributesA
GetLogicalDriveStringsW
SetEndOfFile
SetEndOfFile
CreateEventA
vbscript
DllCanUnloadNow
DllUnregisterServer
DllGetClassObject
DllRegisterServer
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.data Size: 802KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE