Static task
static1
Behavioral task
behavioral1
Sample
e1f427fbe294a3b8d1dc531c309b3ff0522c6191c0ba1a72c538a5439165f024.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e1f427fbe294a3b8d1dc531c309b3ff0522c6191c0ba1a72c538a5439165f024.exe
Resource
win10v2004-20220812-en
General
-
Target
e1f427fbe294a3b8d1dc531c309b3ff0522c6191c0ba1a72c538a5439165f024
-
Size
20KB
-
MD5
8a1f6eeaeedb6dbbb7b5993bea360b78
-
SHA1
608d623455acfe2a791ef86ed833efa29aeba8d1
-
SHA256
e1f427fbe294a3b8d1dc531c309b3ff0522c6191c0ba1a72c538a5439165f024
-
SHA512
07fb44e0385eb38f1f6b6370d169bea5774e236e0251014700c0b05d03b6915c5d4afe3b51954ad58ed662dcb87aecc5ff1d22506bbefd911d7cf94d4d7a3573
-
SSDEEP
192:Mn6SSlmuxskeMDKP5G7/IscVdpahGHLO6tX9kN/FwKdf3Cp2DY7KEyTQey/fQwh:xiUGhG7/mdI2is9kNWKpmQMtIQrL
Malware Config
Signatures
Files
-
e1f427fbe294a3b8d1dc531c309b3ff0522c6191c0ba1a72c538a5439165f024.exe windows x86
be8334f6a61dda093a2ab9b40f871a66
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
ShowWindow
PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA
SetWindowTextA
GetClassLongA
GetWindowTextA
kernel32
CreateFileA
HeapAlloc
GetProcessHeap
LoadLibraryA
GetModuleHandleA
DeleteFileA
CloseHandle
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetStartupInfoA
ReadFile
FlushFileBuffers
Sleep
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InitializeCriticalSection
comctl32
ord17
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ