Static task
static1
Behavioral task
behavioral1
Sample
0e6eb210a59f4fe5bbbe8c428b52b01385e05be9f5a5206524d4b332c12dd898.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0e6eb210a59f4fe5bbbe8c428b52b01385e05be9f5a5206524d4b332c12dd898.exe
Resource
win10v2004-20220812-en
General
-
Target
0e6eb210a59f4fe5bbbe8c428b52b01385e05be9f5a5206524d4b332c12dd898
-
Size
206KB
-
MD5
a10681c73fa46a05a3429a4a356142f0
-
SHA1
dd4b725b82a0971a60f1f40f9aeada4aa32bea58
-
SHA256
0e6eb210a59f4fe5bbbe8c428b52b01385e05be9f5a5206524d4b332c12dd898
-
SHA512
850cf61ae48da1228c9294e3fcf92fdac18d540a0e1f9730d5f536b226443902e9c27fd05242a9d9af0821fac095512d64817efc7de9de0e0eba5ffac3588d7f
-
SSDEEP
6144:bT7X2TSGwEmq6B7ket2nEzvG458rA8/be5E738yg:Pr22IUX0E7G45Oe5Ewv
Malware Config
Signatures
Files
-
0e6eb210a59f4fe5bbbe8c428b52b01385e05be9f5a5206524d4b332c12dd898.exe windows x86
3811608d106bc5bdb881254d6131ef83
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
scecli
SceAnalyzeSystem
SceBrowseDatabaseTable
SceAddToNameStatusList
SceAddToObjectList
SceCloseProfile
SceAppendSecurityProfileInfo
kernel32
GetVolumeInformationA
lstrcpyA
GetCurrentProcessId
LoadLibraryW
WideCharToMultiByte
FindResourceA
GetLocalTime
GetOEMCP
SetUnhandledExceptionFilter
IsValidLocale
HeapAlloc
SetLastError
GetProcessHeap
GetTickCount
GetCurrentProcess
lstrlenA
GetSystemTimeAsFileTime
GetLocaleInfoA
lstrcmpA
HeapFree
MultiByteToWideChar
CreateFileA
QueryPerformanceCounter
LockResource
SystemTimeToFileTime
CloseHandle
schannel
QuerySecurityPackageInfoW
QuerySecurityPackageInfoA
InitializeSecurityContextW
QueryContextAttributesW
QueryContextAttributesA
advapi32
RegOpenKeyExA
RegQueryValueExW
RegCloseKey
RegQueryValueExA
Sections
.text Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ