Static task
static1
Behavioral task
behavioral1
Sample
e307fdd8b12ac3071a6bbd6b10b7613f09f14f697e61783cd18e9c94cf8bb6bd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e307fdd8b12ac3071a6bbd6b10b7613f09f14f697e61783cd18e9c94cf8bb6bd.exe
Resource
win10v2004-20220812-en
General
-
Target
e307fdd8b12ac3071a6bbd6b10b7613f09f14f697e61783cd18e9c94cf8bb6bd
-
Size
286KB
-
MD5
a0fdcb3651fc5fc8fa36ad0199d11780
-
SHA1
2e983598237953cf7f6b03ef2e13d90458792d13
-
SHA256
e307fdd8b12ac3071a6bbd6b10b7613f09f14f697e61783cd18e9c94cf8bb6bd
-
SHA512
2618cce4e5132e712b2f5a744fb2e500d793f95fd102241052a7cc1ae12dea57c518c3ad55a5417135b075573ae8d7c00eb9fdbbe8acecf12c61f88e40b06897
-
SSDEEP
6144:JpduzI3DOjpjPqqzx0vT5HZJ7CIMxHg8mOSWv4UjcYtx5hqn7wRbdK:JPuWDWpz/zx0tZVCI0HOOTDcExfewS
Malware Config
Signatures
Files
-
e307fdd8b12ac3071a6bbd6b10b7613f09f14f697e61783cd18e9c94cf8bb6bd.exe windows x86
7428b35d3032bd610e5b442413a3e718
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetPropA
EndDialog
SetWindowPos
IsCharAlphaNumericW
ValidateRect
OemKeyScan
DialogBoxParamA
EnumDesktopsW
GetActiveWindow
ole32
CoFreeLibrary
CoUnmarshalHresult
OleFlushClipboard
kernel32
GetCurrentProcessId
CopyFileW
CreateProcessW
SizeofResource
HeapDestroy
GetStartupInfoA
HeapFree
InitializeSListHead
LocalAlloc
AddAtomW
LocalFree
SetFileAttributesA
DeleteAtom
InterlockedExchangeAdd
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
LoadLibraryExW
GetProcAddress
HeapCreate
Sections
.text Size: 266KB - Virtual size: 265KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ